lilang wu

iOS/MacOS vulnerabilities, bug hunter🧜‍♂️, BH USA, EU, HITB, CodeBlue, VB speaker

[lilang wu @Lilang_Wu]

The slides of my BH topic, help you to find your own bugs.
https://t.co/z9iFPN8Atg

[Dillon Franke @dillon_franke]

It's been just over a year since CVE-2024-54529 was patched. To celebrate, I'm open-sourcing my full PoC exploit for this CoreAudio type confusion vulnerability 🔊

The code is right here! Enjoy: https://t.co/GRvILp6C84

[lilang wu @Lilang_Wu]

why remote debugging have no symbols? already install kdk on both machines. Haven't studied mac several years🤣

[Brandon Azad @_bazad]

I’m really excited for us to shed light on some really cool work we’ve been doing to harden the XNU allocator! This has been a huge effort by so many people, and I’m very proud of the direction: https://t.co/aW4LXuKbWV

[reverseame @reverseame]

Get root on macOS 12.3.1: proof-of-concepts for Linus Henze's CoreTrust and DriverKit bugs (CVE-2022-26766, CVE-2022-26763) https://t.co/DqgSkQiHN9

[Patrick Wardle @patrickwardle]

Excited to announce my new book series: "The Art Of Mac Malware" https://t.co/jgTOCd34DU 📚

🆓 100% free online
📝 Peer-reviewed & open for comments

When published, proceeds will support our #OBTS conference & charity efforts 😍 #SharingIsCaring

[reverseame @reverseame]

Improving the exploit for CVE-2021-26708 in the Linux kernel to bypass LKRG https://t.co/H1Re9aGsXP

[aSiagaming @vngkv123]

Sorry for re-upload.
CVE-2021-38001 V8 POC exploit about @s0rrymybad of Kunlun Lab via Tianfu Cup 2021.
https://t.co/iYFZ9OSHdB

[Project Zero Bugs @ProjectZeroBugs]

XNU network stack kernel heap overflow due to out-of-bounds memmove in 6lowpan https://t.co/H5bEKQW78z

[Project Zero Bugs @ProjectZeroBugs]

Samsung NPU (Neural Processing Unit) out-of-bounds write in npu_session_format https://t.co/DcRMHyQrJH

[lilang wu @Lilang_Wu]

@pattern_F_ Nice work!

[lilang wu @Lilang_Wu]

@jbradley89 nice finding

[Anderson Nascimento @andersonc0d3]

CVE-2020-27897: Apple macOS Kernel OOB Write Privilege Escalation Vulnerability https://t.co/fw6rT4QXLK

[Ian Beer @i41nbeer]

Excited to finally publish my lockdown project from earlier this year: an iOS zero-click radio proximity exploit odyssey.
https://t.co/UXQvemH0hG

[TrendAI Zero Day Initiative @thezdi]

The latest guest blog from the Trend Micro Research Team details CVE-2019-0230: remote code execution in Apache Struts framework due to insufficient input validation leading to a forced double Object Graph Navigation Library (OGNL) evaluation. https://t.co/Lk1GANcYpg

[ABC Research @abcinfosec]

THAT was not easy. But we did it. #ios14 #exploit #zeroday

[lilang wu @Lilang_Wu]

The slides of our Blackhat Aisa arsenal topic.
#BlackHatAsia
https://t.co/CWjgHwin94

[Brandon Azad @_bazad]

The core of Apple is PPL: Attacking the XNU kernel's kernel. https://t.co/7f15UG2s9J

How to use an out-of-bounds read in PPL (Apple's kernel-within-the-kernel) to get a stale TLB entry for a page, allowing you to bypass PPL and map arbitrary physical addresses accessible at EL0.

[Axel Souchet @0vercl0k]

If you need to debug a Linux kernel Hyper-V guest check out https://t.co/S2OP8FNl3v.

Allows you to kernel debug the guest from WSL on the host which is neat.

[Aleph Research @alephsecurity]

New features added to our project's repository!

* iOS on QEMU KVM support
* ASLR disabled for user mode
* TFP0 for user apps
* CoreTrust patched - no need for static trust cache

Check it out and feel free to contribute!

https://t.co/uClu4PGVva