Viewing profile — kmfpl

Compiler can sometimes inline syscall wrappers, so not that easy to check statically. For the same reason searching for SVC instructions would yield tons of results. If you search …

You also removed the giant pole stuck up your ass?

I agree, this looks extremely sketchy. Especially because the code is just writing a fully controlled byte in the buffer and incrementing its index. This would give you a controlle…

Well, that’s 7 years of major updates with all the security fixes. Moreover, Apple continues to release minor versions for devices that are not supported anymore, in order to fix m…

This is simply how Apple does things. They provide software support for ~10 years and then they drop it. Is it wrong? I’m not entirely sure. You can call that greedy, but take a fe…

With lldb you can do that, basically you have the option of running commands when a given breakpoint is hit, so you can just make it place another breakpoint, and it will be placed…

People in this thread seem very confused about a lot of stuff so I’m going to try and make some clarifications: 1) This is an RCE, so what it does is achieving code execution in th…

You understand that having W^X protections on any JIT area is fairly useless without a strong CFI model in place right? Any attacker could easily execute a ROP/JOP chain to switch …

Normally bugs in these types of attacks target daemons that are always connected even if not logged onto iMessage or even if you disable iMessage. Or at least this was the case wit…

>“Just reboot your phone, and you're good to go” Doesn’t really work like that. First of all, when would you reboot your phone? Once per day? Once per hour? Every five minutes? Reg…