Wojciech Reguła wojciechregula.blog

TCC bypasses via launch services

wojciechregula.blog·82w

Multiple TCC bypasses via SQLite environment variables

wojciechregula.blog·99w

ELECTRONizing macOS privacy

wojciechregula.blog·121w

macOS Atlassian Companion Remote Code Execution

wojciechregula.blog·149w

Bypass TCC via iCloud

wojciechregula.blog·167w

macOS Sandbox Escape vulnerability via Terminal

wojciechregula.blog·182w

macOS Red Teaming: Apple Dev-ID signed Java environment

wojciechregula.blog·201w

macOS Red Teaming: Initial access via AppleScript URL

wojciechregula.blog·217w

macOS Red Teaming: Bypass TCC with old apps

wojciechregula.blog·218w

macOS Red Teaming: Get Active Directory credentials from NoMAD

wojciechregula.blog·219w

Bypass TCC via privileged helpers aka CVE-2020-10008

wojciechregula.blog·232w

Change home directory and bypass TCC aka CVE-2020-27937

wojciechregula.blog·244w

Play the music and bypass TCC aka CVE-2020-29621

wojciechregula.blog·245w

M1 Macs GateKeeper bypass aka CVE-2021-30658

wojciechregula.blog·256w

Press 5 keys and become r00t aka CVE-2021-30655

wojciechregula.blog·262w

How to rob a (Fire)fox

wojciechregula.blog·271w

When vulnerable library is actually your physical book

wojciechregula.blog·277w

Network Extension Framework aka Swiss cheese

wojciechregula.blog·287w

Stealing macOS apps' Keychain entries

wojciechregula.blog·289w

Learn XPC exploitation - Part 3: Code injections

wojciechregula.blog·307w

Log in to enable infinite scrolling