mr a

[0xor0ne @0xor0ne]

Series on Compiler and LLVM internals

P1: https://t.co/KbhvR2HpaV
P2: https://t.co/owlCGH5p9C
P3: https://t.co/PmnpIgrhXA
P4: https://t.co/RNPiYaVcqU

#infosec

[T4T5 @t4t5]

airdrop fully reverse-engineered!

works flawlessly on my framework laptop

[Matthew Berman @MatthewBerman]

Reverse Engineer Anything 😂

Software is done.

[MG 🇮🇳 @mgnayak5]

Must Watch, please don't Skip.

[7h3h4ckv157 @7h3h4ckv157]

T3MP3ST

Offensive security tool, built for authorized testing, research, and education. Point it only at systems you own or have explicit, written permission to test.

Resource/Ctedit: https://t.co/I5W28Xs9jR

[A D H A M 🇵🇸 @m4kr0]

I just published a deep-dive into Play Integrity API & App Attestation & how to bypass it
the security layer behind most modern banking & fintech apps that protect against rooted devices

Read The Article:
https://t.co/IfNsDA4p2F

#AndroidSecurity #MobileSecurity #PlayIntegrity

[Andrea (Drego) Draghetti 👨🏻‍💻 🎣 @AndreaDraghetti]

Interesting investigation by @RositaRijtano into Dataflow Security, the Italian exploit developer!

It explores the company’s rapid growth, its ties to Israel’s cyber/intelligence ecosystem, and a key issue in offensive security!

https://t.co/LOdhW6JbjL

[Retainer @retainermethod]

Nikola Tesla’s attitude on sex (1935)

[Adel Ka @0x4D31]

huge if true.

// great job @moyix. easily my favourite talk at @UnpromptedAU.

[Nicolas Krassas @Dinosn]

The Hacker's Guide to Attacking AI Agents https://t.co/C0XzajDdVb

[ONE Jailbreak @onejailbreak_]

🗞️iOS 27.0 (24A437) shipped today. Hours later, researcher 0xjohnny posted AirLift, a public proof-of-concept PoC Escapes iOS 27 Sandbox 🔥

https://t.co/qimImqXFyq

[dbugs @ptdbugs]

iOS Exploit for Sale (CVE-2025-43529, CVE-2026-20700, CVE-2025-14174)

Read on dbugs: https://t.co/qTbJI78iiE

Vulnerable versions: Apple iOS 15.0–18.2
Price: $10k (3 hands max), $18k (1 hand only)

According to the author’s description, the exploit relies on well-known CVEs and a web trigger via the Safari browser. This implies a scenario in which the vulnerability can be triggered after opening a specially crafted webpage in Safari.

CVE-2025-43529 (https://t.co/ej75UoCJ3u) - a use-after-free vulnerability in WebKit, where a specially crafted web page could lead to the execution of arbitrary code.
CVE-2025-14174 (https://t.co/9n8Te50FyI) - another WebKit vulnerability related to a memory corruption when processing malicious web content.
CVE-2026-20700 (https://t.co/Mju0G7xZ5J) — a memory corruption vulnerability in the dyld component that, when combined with an existing write-to-memory capability, could allow arbitrary code execution.

iOS remains the second-largest mobile OS in the world: according to StatCounter, as of May 2026, its share of the mobile operating system market was 31,95% (https://t.co/sfHXyXdYJI) globally.

CVE-2025-14174 — PT-2025-50966: https://t.co/RkylIqE6Ls
CVE-2025-43529 — PT-2025-51037: https://t.co/9rg6g77CYz
CVE-2026-20700 — PT-2026-7805: https://t.co/K8Jssyb97Z

[Dark Web Intelligence @DailyDarkWeb]

🚨 TWO ALLEGED iOS ZERO-DAY EXPLOIT CHAINS OFFERED FOR SALE

A threat actor is advertising two purported iOS exploit kits, dubbed “DarkSword” and “Coruna,” claiming both have previously been used in private operations.

According to the underground listing:

* DarkSword allegedly targets iOS 18.4–18.7
* Claimed zero-click exploitation with no user interaction
* Advertised capabilities include RCE, sandbox escape, persistence, data exfiltration and full device compromise
* Seller claims the chain remains undetected as of September 2026
* Coruna allegedly targets iOS 13–17.2.1
* Claimed capabilities include zero-click exploitation, persistence, remote control and data theft
* The seller is asking $7,500 for DarkSword and $5,000 for Coruna

⚠️ Analyst Note:

If DarkSword is legitimate, the combination of zero-click execution, sandbox escape and persistence against recent iOS versions would represent a significant mobile threat.

However, the unusually low pricing for a purported current, reliable zero-click iOS chain is a major credibility concern. The seller provides no technical evidence in the visible listing sufficient to establish that either exploit exists, works as described, or represents previously unknown vulnerabilities.

For now, these should be treated as unverified underground-market claims rather than confirmed iOS zero-days.

#DDW #iOS #ZeroDay #ThreatIntelligence

[matteyeux @matteyeux]

"Revisiting SecureROM Adventures".

Talk is about the SecureROM and an usbliter8 variant by iH8sn0w

https://t.co/n3WTOHRCL9

[Ben Wehrman @benwehrman]

Cancer: The Forbidden Cures (FULL DOCUMENTARY)

[Commentary | Global Ivermectin Research Hub @Ivermectinkart]

“One of the ingredients is Wormwood, which is Natures Ivermectin”

Man discusses a book published where Doctor cured 100 different types of Cancer.

[cr3ghost @cr3ghost]

If you're new to exploit development, reverse engineering or vulnerability research, bookmark this before buying another course.

Blackstorm Security has published 1,600+ pages of research for FREE.

Windows kernel exploitation.
Driver reversing.
Patch diffing.
Chrome / V8 / WebAssembly.
Hyper-V.
macOS / iOS internals.
Modern mitigation bypasses.
Real CVEs taken from root cause to working exploitation.

Their CVE-2024-30085 series alone spans hundreds of pages and multiple exploitation strategies.

This is the kind of material that teaches you how vulnerability researchers actually think, not just how to run tools.

19 research papers. 1,657 pages. Free.

Start here:
https://t.co/wDftgmamHH

Author: @ale_sp_brazil

Focus on the techniques not the tools (X64DBG, GHIDRA/IDA, WINDBG, GDB GEF)

#ExploitDevelopment #ReverseEngineering #VulnerabilityResearch

[苏乐 @ai_suxiaole]

Android 逆向最折腾的不是反编译

是反编译完以后

还得自己从一堆混淆代码里找接口

这个 android-reverse-engineering-skill 可以直接交给 Claude Code 做

把 APK，XAPK，JAR，AAR 丢进去

它会自动反编译，再把 Retrofit，OkHttp，Ktor，GraphQL 这些网络请求找出来

接口地址，认证方式，请求签名这些也能一起整理

碰到 R8 混淆

还能从 Kotlin metadata 里恢复一部分原始类名

继续顺着 Activity，ViewModel，Repository 往下追到真正的网络请求

平时做安全研究，协议分析

或者想快速看懂一个 Android App 怎么请求接口的

这个 Skill 可以装上

GitHub：https://t.co/9oWiDtywAv

[Christoph Kolbicz @_kolbicz]

Updated my Cyanide fork to 1.5.2
- Fixed kernel panics occurring hours after closing Cyanide
- A18/M4 now use a more reliable exploit path
- Fixed Remote Call on M-series iPads
- Tweaks now apply faster, adjustable in Launch Settings
https://t.co/yr7zNppmPk