Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Over The Air - Vol. 2, Pt. 2: Exploiting The Wi-Fi Stack on Apple Devices

projectzero.google | blog | #exploitation | #firmware | #apple | #iphone | #project-zero | #broadcom | #wi-fi

Summary

Part two of Project Zero's Over The Air Vol. 2 series, focusing on the firmware running on Broadcom's Wi-Fi SoC in the iPhone 7 as a step toward over-the-air exploitation.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
Over The Air - Vol. 2, Pt. 3: Exploiting The Wi-Fi Stack on Apple Devices
The final part of Project Zero's Over The Air series, completing a remote kernel code execution chain on the iPhone 7 using Wi-Fi communication alone.
blog · projectzero.google
Over The Air - Vol. 2, Pt. 1: Exploiting The Wi-Fi Stack on Apple Devices
Project Zero revisits Broadcom's Wi-Fi stack through Apple devices, mapping new attack surfaces and building toward a full over-the-air exploit chain against iPhones.
blog · projectzero.google
Over The Air: Exploiting Broadcom’s Wi-Fi Stack (Part 2)
Part two of Project Zero's Over The Air research, escalating from code execution on Broadcom's Wi-Fi SoC to remote kernel code execution on the host.
blog · projectzero.google
Over The Air: Exploiting Broadcom’s Wi-Fi Stack (Part 1)
Part one of Project Zero's Over The Air series, turning attention from application processors to Wi-Fi chips and finding flaws in Broadcom's widely used Wi-Fi stack.
blog · projectzero.google
What is a "good" memory corruption vulnerability?
A Google Project Zero essay on what makes a memory corruption vulnerability valuable, focusing on how reliably it can be exploited.
blog · projectzero.google
Analysis and Exploitation of an ESET Vulnerability
A Google Project Zero write-up analyzing and exploiting a vulnerability in ESET antivirus software, highlighting the attack surface introduced by security products.
back