جبر

[جبر @AbuDhaar1]

@calif_io Preview GG’d

[جبر @AbuDhaar1]

Its just a repackaged bullshit, I diff'd it against the original DS copy.

[blackorbird @blackorbird]

P7 #DarkSword, named for the `p7_` variable prefix in its modified code, refines earlier DarkSword variants by cutting its on-device footprint through the removal of HTTP/syslog debug logging and fewer process injections, while improving stability via browser localStorage checks that block re-exploitation.

Functionally it shifts keychain theft to on-device JSON extraction (instead of copying the raw database for server-side processing), adds targeted crypto-wallet harvesting such as imToken data, and introduces full two-way C2 communication over endpoints like `/beacon` (15-second tasking polls), `/war`, `/nb` and `/p`, with dedicated handlers for disk scanning, photo and Notes exfiltration, arbitrary JavaScript execution, and sleep/exit controls, all typically injected into the SpringBoard process.
#IOC
https://t.co/X8QZNhBm8F

[جبر @AbuDhaar1]

Thanks @alrajhibank

[جبر @AbuDhaar1]

Fable just burned my 0day RCE...8 days after I reported it.

We're no longer friends Fable 5.1

[جبر @AbuDhaar1]

@justdionysus @odinshell yeah i noticed and honestly i just wanted to learn whats it look like going from upgrading the primitive to actually execute code within the sandboxed process. Curious. Nonetheless the blog is nice and 4 hours apart from the diff and patch so its nice.

[جبر @AbuDhaar1]

@DrWhax There’s a missing link I don’t think it’ll be found in CoreGraphics itself, should see what path reaches aa_* when a user receives the attachment and WhatsApp should be the answer

[Alexandre Borges @ale_sp_brazil]

Exploiting Reversing (ER) Series | Article 10: iOS Security Research (part 01)

223 pages, free. The first article in the series aimed at iOS itself, and the opening of a multi-part sequence.

Published on:

https://t.co/VlebcByqKG

This article will be published on https://t.co/GBDi0lO8Zd next week.

I would like to thank Ilfak Guilfanov (@ilfak) and Hex-Rays SA (@HexRaysSA) for the continuous support.

Hope you enjoy the read!

#iOS #Apple #VulnerabilityResearch #ExploitDevelopment #ReverseEngineering

[: @8__lii]

"تركي ليّا من الليالي غدن عوج
حمل عتيبة كلها ما تشيله
يرسي كَما ترسي البواخر علي الموج
ومنين ما صك البحر يرتكيله
مادام تركي حي ما ودي ادوج
وان غاب غبت مِن الرجوم الطويله".

[ONE Jailbreak @onejailbreak_]

🗞️For years you needed a jailbroken iPhone to decrypt iOS apps. That’s the part that just moved. Full IPA decrypt. No physical iPhone. No jailbreak🔥

https://t.co/tQRNQMRfna

[Calif @calif_io]

For security reasons, everyone at Calif is being issued an iPhone 18.

No iPhone Duo though. We can’t believe Apple has just casually doubled the attack surface. Who needs two zero-clicks at the same time?!

Not us. We take security very seriously. Thank you.

[Meshaal @unrealmesh]

CVE-2026-72196

https://t.co/9AcWbAKwXL

[جبر @AbuDhaar1]

@unrealmesh 👏🏻👏🏻👏🏻👏🏻

[Meshaal @unrealmesh]

ZDI-CAN-31780😇

[Anas Almizani @x6vrn]

authorization bypass in Next.js middleware/proxy 😆

[جبر @AbuDhaar1]

@x6vrn Well done anas 👏🏻👏🏻

[جبر @AbuDhaar1]

@maheruol @AZK_SA وش يدريك لو يسوي ثوره بالذكاء اللاصطناعي الي ممكن تاثر على التكنلوجيا بشكل عا��؟ المظنه موجوده في تعليقاتك واستنتاجاتك, ولد طازه توه ماعطيناه فرصه ينجز تحاول تكسر مجاديفه لسبب ما؟ هل لانك ما اعطيت نفس الفرصه.؟

[جبر @AbuDhaar1]

@maheruol @AZK_SA كيف تقيس إمكانيات شخص ما تعرفه ولا تعلمت معه؟ قد سمعت بالعباقرة؟ مثل مارك زكربيرق سواء فيسبوك يوم كان عمره ١٩؟ فيلو فانسوورث هو الي تصوّر التيلفزيون بعمر ١٤ سنة، كثير الي غيرو فالتقنية وسوو ثورة تقنية بعمر صغير والتقنية ما صارت زي قبل فممكن ان الشمري يسوي شي مشابهه او افضل.

[جبر @AbuDhaar1]

@maheruol @AZK_SA العقل يسبق العمر، والنضج له دوره في اتخاذ القرارات لكن بالنسبة للهندسه الالكترونية كل ما كان عمرك اصغر كل ما زادت امك��نياتك في الانتاج والتعلم والتكييف بسرعه بالذات فالتقنية. اشوفه منصب مناسب جدا له ويستاهل.

[جبر @AbuDhaar1]

@ncxcq @rooootdev not true