GenericCoding

posi0nKFD dev

[Joseph Ravichandran @0xjprx]

Received my first iOS + macOS kernel CVE!

Fixed in XNU for iOS 17 and macOS Sonoma; a full writeup will be posted here soon.

[GenericCoding @GenericCoding]

@Lfy_Trav @Little_34306 @Lrdsnow101 Why turn the camera away AND leak serial anyways? Why do you think people turn the camera away ever at all? Either way - you can just prove by pushing to github.

[GenericCoding @GenericCoding]

@straight_tamago what's the 127.0.0.1:57955 hosting and is the service which is being hosted at that address turned on? Usually "cannot connect" is an issue with server configuration.

[GenericCoding @GenericCoding]

built, forgot to configure build dir so have to rebuild though :(

[GenericCoding @GenericCoding]

Wanted to try Fuzzilli, building webkit rn.

[GenericCoding @GenericCoding]

webkit mainline not building need to remove:
#ifdef __OBJC__
// This function convert null strings to empty strings.
WTF_EXPORT_PRIVATE RetainPtr<NSString> createNSString() const;
#endif

[GenericCoding @GenericCoding]

@CoreSerena I got a new one
sudo mv / /tmp

[GenericCoding @GenericCoding]

@CoreSerena Based woman explains how phishing attacks account for 22% of data breach vectors and how ditching email can drastically lower the potential attack surface against your organization.

[GenericCoding @GenericCoding]

If you ever want to know if you should gamble: consider the following, casinos are really nice places — who did they get all that money from to operate them?

[GenericCoding @GenericCoding]

@eveiyneee u feeling ok

[GenericCoding @GenericCoding]

@CoreSerena I was going to donate exactly two pennies but it will not allow me to donate under 3 doll hairs, boycotting your ko-fi for disinfo smh. :/

[GenericCoding @GenericCoding]

@CoreSerena I have a touch bar mac but trying to develop features from personal experience you can't test yourself is annoying so I wouldn't worry too much about it, lol.

[GenericCoding @GenericCoding]

@CoreSerena I think it doesn't work with touch bar?

[GenericCoding @GenericCoding]

@gergely_kalman cat bm.c

[GenericCoding @GenericCoding]

@c22_dev @Little_34306 https://t.co/brQfIQzLXA

[GenericCoding @GenericCoding]

@Little_34306 @c22_dev https://t.co/rTPxq3GeG6

[GenericCoding @GenericCoding]

@DCalabro3 @po6ix @Little_34306 I don't think it should matter, this block should be executed to configure the exploit before it runs, and the alert is a native JS function. It should throw the error before the exploit runs and the alert has no reason not to function it's a simple user agent check.

[GenericCoding @GenericCoding]

@po6ix @Little_34306 i'm skeptical of if the pwn function version check works because I never get the alert unsupported version despite being 16.4.1

[GenericCoding @GenericCoding]

@TheMsterDoctor1 @Lrdsnow101 https://t.co/HZ3rlnW3W3 but this is outdated, the newer KFD apps are simpleKFD https://t.co/ClzyiPnlut which forked it and pureKFD https://t.co/xXcxGMBfOK

[GenericCoding @GenericCoding]

Im adding a debug log to PureKFD by @Lrdsnow101