Asteris Ch



[Angelos T. Kalaitzidis @0xShad3]

Hell yeah Cellebrite is dropping SecureROM 0days on stage (variant of usbliter8) !!

[argp @_argp]

Ping me if you’re looking to work in vulnerability research and/or (yeah they’re not necessarily bundled) exploit development.

[Asteris Ch @jac0wl]

Congrats 🔥

[TrendAI Zero Day Initiative @thezdi]

Even though they missed out on registration, @aahmad097, @Rembown, @m40282845, @0xShad3, @thegrandpew (@ht3labs) gave quite the demonstration of their exploit prowess against the QNAP TS-464 & the Synology BeeStation. We look forward to seeing their work in future competitions

[Asteris Ch @jac0wl]

siri what's the latest techniques itw

[Saagar Jha @_saagarjha]

Siri what is the Apple Root CA signing key

[ohjin @pwn_expoit]

https://t.co/GSlf02qRub

4403769: ios: Enable PartitionAlloc for week four and remainder of 112 stable. | https://t.co/ptRUAHwJbM

chrome IOS Fullchain really come true?

[Asteris Ch @jac0wl]

Innovated some new exciting "capabilities", arriving soon 🤣
https://t.co/B23QHnIvJk

[j j @mistymntncop]

Exploit for CVE-2022-4262. Fukin finally! Shoutout to @_clem1 for finding the ITW exploit. And shoutout to @5aelo, @bjrjk, @alisaesage for their RCA's and prior analysis of the vuln :). https://t.co/JTRYBSgWw4

[Hossein Lotfi @hosselot]

Apple Safari In-The-Wild type confusion vulnerability (CVE-2024-23222 [267134]) happens because DFG constant property load does not check the validity at the main thread:
https://t.co/WBMvhbfIYv

[Asteris Ch @jac0wl]

Do you trust @CyberPanel's security ? Superb work 🔥published today by my friend and ex-colleague @altioff showcases why you shouldn't.

[matteyeux @matteyeux]

Seems like someone pushed a bunch of iBoot symbols to Hexrays's Lumina server

[stephen @_tsuro]

The first #v8CTF submission is now public:
https://t.co/8NB2JpVkDF

Note that the current flag is still up for grabs, maybe M118 is unhackable? ;P

You should also check out @madstacks3's excellent writeup at https://t.co/xLItx8Wc40

[Boris Larin @oct0xor]

Jailbreak and kernel debugging is coming to new iPhones! (Apple A12-A16 SoC’s < iOS 16.6)

[Yuri Sagalov @yuris]

A high school student reverse engineered the iMessage protocol and published a cross-platform proof of concept.

https://t.co/MjGqXYEVwK

[VUSec @vu5ec]

Disclosing #SLAM, aka how to combine Spectre and Intel LAM (& co.) to leak kernel memory on future CPUs (demo below). Thousands of exploitable "unmasked" (or pointer chasing) gadgets in the Linux kernel. Joint work by @MatheHertogh @SanWieb @c_giuffrida: https://t.co/8sgL8t8eC5

[Sunjoo Park @grigoritchy]

It is interesting to see similar shift/unshift race condition issues that i found and exploited webkit in 2018 (https://t.co/K4HPKoaDXv) are exploited on safari, chrome these days as an in the wild bug

[daem0nc0re @daem0nc0re]

To dive more advanced low layer things such as hypervisor, I'm reviewing Windows kernelmode rootkit techniques, and created a repositry for research and educational purpose.
More PoCs will be added later (filesystem/network mini-filter things especially).
https://t.co/tyeIlzMITm

[Alex Plaskett @alexjplaskett]

Jailbreaking the Sonos Era 100

https://t.co/CQeOagTCFf

The Era 100 is Sonos’s flagship device, released on March 28th 2023 and is a notable step up from the Sonos One. @NCCGroupInfosec found multiple weaknesses within the bootloader which could lead to full compromise

#sonos

[1ce0ear @1ce0ear]

More APVI bugs were disclosed, including two page UAF and PFN leaks:

https://t.co/67U3KWFS2w
https://t.co/naMeKckhcZ
https://t.co/en6n4hpM0s

[1377 High-yield Nukes @buptsb]

My quick notes about CVE-2023-2033 https://t.co/l9EwXnFcgM

[tmp.0ut @tmpout]

Check it out, it's tmp.0ut Volume 3!

https://t.co/Gm9erN8hTJ