Hassan @_Cyclon3

Security Engineer | CTF Player Having fun with #MobileSecurity, #ReverseEngineering, & #RASP cyclon3.com Joined April 2020

Tweets

42
Followers

95
Following

117
Likes

116

open-obfuscator @open_obfuscator

2 years ago

The challenge is now over! Congratulation to @nneonneo for winning the write-up quality price and congratulation to korami as well for his solution. You can check them out here: - obfuscator.re/challenges/202… - obfuscator.re/challenges/202… (1/2)

1 33 79 12K 21

Download Image

Prateekg147 @prateekg147

2 years ago

A 5-part complete series of on ARM64 exploitation and reversing by @8kSec Part1: 8ksec.io/arm64-reversin… Part2: 8ksec.io/arm64-reversin… Part3: 8ksec.io/arm64-reversin… Part4: 8ksec.io/arm64-reversin… Part5: 8ksec.io/arm64-reversin… @mobilesecurity_

1 119 341 29K 152

The Citizen Lab @citizenlab

2 years ago

🚨NEW REPORT: NSO Group’s #Pegasus #Spyware returns in 2022 with a trio of iOS 15 and iOS 16 zero-click exploit chains. The report finds NSO group clients deployed exploits against civil society members including two human right defenders in #Mexico citizenlab.ca/2023/04/nso-gr…

4 224 315 94K 46

Alex Plaskett @alexjplaskett

3 years ago

Here are some of the presentations I found the most interesting within the macOS/iOS Kernel Security research space in 2022! 🧵 alexplaskett.github.io/macos-ios-secu…

3 65 219 44K 78

Download Image

Romain THOMAS @rh0main

3 years ago

I'm happy to publish the second part of the series about iOS (de)Obfuscation and RASP protections. romainthomas.fr/post/22-09-ios… In particular, it introduces a new technique to "hook" syscalls on AArch64 based on 'gum_memory_patch_code' from @fridadotre

5 57 128 0 21

Download Image

Romain THOMAS @rh0main

3 years ago

Here is the first blog post about RASP analysis on iOS and some design weaknesses: romainthomas.fr/post/22-08-sin… Note: This is an **ephemeral** blog post, so feel free to grab a copy here: dl.romainthomas.fr Enjoy!

0 29 83 0 5

Download Image

Ian Beer @i41nbeer

3 years ago

Excited to publish my writeup of a novel iOS in-the-wild exploit: The curious case of the fake Carrier .app: googleprojectzero.blogspot.com/2022/06/curiou…

14 256 751 0 102

inversecos @inversecos

3 years ago

How to reverse and exploit iOS binaries, part 2 😈 Read my step-by-step TUTORIAL on exploiting arm64 via: > buffer overflow attack > rop chain I also built another cute binary for u to hacky hack 💕 inversecos.com/2022/06/guide-…

22 237 969 0 302

Download Image

Objective-See Foundation @objective_see

3 years ago

It's not everyday new iOS malware is uncovered 👾📲🍎 In our latest (guest) blog post, Taha Karim (@lordx64), details how attackers are targeting iOS web3 users via malicious profiles & trojanized iOS apps: objective-see.org/blog/blog_0x6F… 😱

6 83 218 0 35

Hassan @_Cyclon3

3 years ago

I've created an awesome list of iOS application security and penetration testing. I hope this helps people to learn more about #iOSsecurity. Your contributions are always welcome! github.com/Cy-clon3/aweso… #MobileSecurity #Cybersecurity #InfoSec #Bugbountytips #Bugbountytip

0 0 0 0 1

OWASP Mobile App Security @OWASP_MAS

4 years ago

We released version 1.2 of the OWASP MSTG! As this is the first release after a while, there are quite a few changes. More details in our release notes: github.com/OWASP/owasp-ms… ✅ Download it ✅ Use it ✅ Give feedback via Github Issues Thank you to all of our supporters!

0 44 79 0 13

Edward Snowden @Snowden

4 years ago

Stop what you're doing and read this. This leak is going to be the story of the year: (LINK: theguardian.com/world/2021/jul…)

1K 26K 62K 0 3K

Download Image

Romain THOMAS @rh0main

4 years ago

Here is the blog post about the anti-jailbreak, anti-Frida, anti-debug used in PokemonGO (featuring @fridadotre and @LIEF_project). romainthomas.fr/post/21-07-pok…

7 248 627 0 129

Download Image

Ben Hawkes @benhawkes

5 years ago

Apple have fixed three issues reported by Project Zero that were being actively exploited in the wild. CVE-2020-27930 (RCE), CVE-2020-27950 (memory leak), and CVE-2020-27932 (kernel privilege escalation). The security bulletin is available here: support.apple.com/en-us/HT211929

14 364 849 0 44

Sam Curry @samwcyo

5 years ago

New writeup: "We Hacked Apple for 3 Months: Here’s What We Found" Featuring... @bbuerhaus, @NahamSec, @erbbysam, and @_StaticFlow_ samcurry.net/hacking-apple

64 1K 3K 0 560

Bhavuk Jain @bhavukjain1

5 years ago

Zero-day in Sign in with Apple - bounty $100k bhavukjain.com/blog/2020/05/3…

105 896 3K 0 363

Synacktiv @Synacktiv

5 years ago

Return of the iOS sandbox escape: lightspeed's back in the race!! The XNU bug @JohnCool__ described last year was reintroduced and is still exploitable in the last version of iOS, as shown by @unc0verTeam: synacktiv.com/posts/exploit/…

5 139 323 0 17

Download Image

ZecOps - A Jamf Company @ZecOps

5 years ago

Apple just released the list of CVEs that were patched on iOS 13.5, including an official confirmation that the #MailDemon vulnerabilities were patched. The full list of security issues addressed on iOS 13.5 is available at: support.apple.com/de-de/HT211168

7 14 60 0 1

Download Image

@Pwn20wnd @Pwn20wnd

5 years ago

#unc0ver v5.0.0 will be the first 0day jailbreak released since iOS 8! Every other jailbreak released since iOS 9 used 1day exploits that were either patched in the next beta version or the hardware. This will be a big milestone for jailbreaking.

418 1K 6K 0 36

Martin Kleppe @aemkei

5 years ago

// #HIEROGLYPHS.js // Valid JavaScript from the year 2020 BC: 𓅂='',𓂀=!𓅂+𓅂,𓁄=!𓂀+𓅂,𓊎=𓅂+{},𓆣=𓂀 [𓅂++],𓊝=𓂀[𓇎=𓅂],𓏢=++𓇎+𓅂,𓆗=𓊎[𓇎+𓏢 ],𓂀[𓆗+=𓊎[𓅂]+(𓂀.𓁄+𓊎)[𓅂]+𓁄[𓏢]+𓆣+ 𓊝+𓂀[𓇎]+𓆗+𓆣+𓊎[𓅂]+𓊝][𓆗](𓁄[𓅂]+𓁄[ 𓇎]+𓂀[𓏢]+𓊝+𓆣+'`𓅂 𓏢 𓂀 𓁄 𓆣 𓊝 𓇎`')``