Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Revisiting Apple IPC: (1) Distributed Objects

projectzero.google | blog | #vulnerability-research | #ios | #apple | #ipc | #osx | #distributed-objects

Summary

Research into auditing and exploiting Apple IPC, aiming to find at least one bug in each OS X/iOS IPC mechanism, starting with Distributed Objects as an underexplored attack surface.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
DER Entitlements: The (Brief) Return of the Psychic Paper
Research on DER-encoded entitlement handling that briefly revived the Psychic Paper technique for forging iOS entitlements, covering the root cause and subsequent fixes.
blog · projectzero.google
Over The Air - Vol. 2, Pt. 1: Exploiting The Wi-Fi Stack on Apple Devices
Project Zero revisits Broadcom's Wi-Fi stack through Apple devices, mapping new attack surfaces and building toward a full over-the-air exploit chain against iPhones.
blog · projectzero.google
Race you to the kernel!
A race condition in OS X and iOS setuid binary loading leaves a short window to manipulate the memory of an euid 0 process, potentially gaining entitlements and loading unsigned kernel extensions.
blog · projectzero.google
More Mac OS X and iPhone sandbox escapes and kernel bugs
A Google Project Zero rundown of sandbox escape and privilege escalation bugs in Mac OS X and iOS fixed by Apple in OS X 10.9.5 and iOS 8.
research · bughunters.google.com
Google's PageBreak Project – Real-World Findings
This post provides a technical deep dive into specific, real-world vulnerabilities discovered by Google's PageBreak scanner
blog · projectzero.google
An analysis of an in-the-wild iOS Safari WebContent to GPU Process exploit
A step-by-step analysis of an in-the-wild iOS exploit that escapes Safari's WebContent process into the GPU process, covering the underlying bug and exploitation strategy.
back