Posts on theevilbit blog theevilbit.github.io

macOS LPE via the .localized directory

theevilbit.github.io·24w

The diskarbitrationd and storagekitd Audit Story Part 2

theevilbit.github.io·75w

The diskarbitrationd and storagekitd Audit Story Part 1

theevilbit.github.io·80w

Dock Tile Plugins Could Be Used to Escalate Privileges

theevilbit.github.io·96w

CVE-2023-40424 - How Malware Can Bypass Transparency Consent and Control

theevilbit.github.io·104w

How Apple Mitigates Vulnerabilities in Installer Scripts

theevilbit.github.io·114w

Launch and Environment Constraints Deep Dive

theevilbit.github.io·136w

macOS Service Management - The SMAppService API - Quick Notes

theevilbit.github.io·138w

CVE-2022-22655 - TCC - Location Services Bypass

theevilbit.github.io·170w

CVE-2022-32929 - Bypass iOS backup's TCC protection

theevilbit.github.io·183w

Prologue - The Lord of The Rules

theevilbit.github.io·186w

CVE-2017-2533 - The details behind

theevilbit.github.io·194w

AMFI Launch Constraints - First Quick Look

theevilbit.github.io·205w

CVE-2021-30808 - CVE-2021-1784 strikes back - TCC bypass via mounting

theevilbit.github.io·238w

Getting started in macOS security

theevilbit.github.io·242w

GateKeeper - Not a Bypass (Again)

theevilbit.github.io·255w

macOS Monterey Shortcuts - First look

theevilbit.github.io·258w

NOCVE - TeamViewer Local Privilege Escalation Vulnerability

theevilbit.github.io·260w

Experiences with Apple Security Bounty

theevilbit.github.io·265w

CVE-2020-9900 & CVE-2021-1786 - Abusing macOS Crash Reporter

theevilbit.github.io·265w

Log in to enable infinite scrolling