theevilbit blog theevilbit.github.io

Talks and Workshops

theevilbit.github.io·6h

macOS LPE via the .localized directory

theevilbit.github.io·23w

Talks and Workshops

theevilbit.github.io·66w

The diskarbitrationd and storagekitd Audit Story Part 2

theevilbit.github.io·75w

The diskarbitrationd and storagekitd Audit Story Part 1

theevilbit.github.io·79w

Beyond the good ol' LaunchAgents - 35 - Persist through the NVRAM - The 'apple-trusted-trampoline'

theevilbit.github.io·83w

Beyond the good ol' LaunchAgents - 34 - launchd boot tasks

theevilbit.github.io·84w

Dock Tile Plugins Could Be Used to Escalate Privileges

theevilbit.github.io·95w

Beyond the good ol' LaunchAgents - 33 - Widgets

theevilbit.github.io·101w

CVE-2023-40424 - How Malware Can Bypass Transparency Consent and Control

theevilbit.github.io·103w

How Apple Mitigates Vulnerabilities in Installer Scripts

theevilbit.github.io·113w

Launch and Environment Constraints Deep Dive

theevilbit.github.io·136w

Beyond the good ol' LaunchAgents - 32 - Dock Tile Plugins

theevilbit.github.io·137w

macOS Service Management - The SMAppService API - Quick Notes

theevilbit.github.io·138w

Beyond the good ol' LaunchAgents - 31 - BSM audit framework

theevilbit.github.io·155w

Beyond the good ol' LaunchAgents - 30 - The man config file - man.conf

theevilbit.github.io·158w

CVE-2022-22655 - TCC - Location Services Bypass

theevilbit.github.io·170w

CVE-2022-32929 - Bypass iOS backup's TCC protection

theevilbit.github.io·183w

Prologue - The Lord of The Rules

theevilbit.github.io·186w

CVE-2017-2533 - The details behind

theevilbit.github.io·194w

Log in to enable infinite scrolling