Android technical lead @dfsec_com
South Korea
Joined January 2009
- Tweets2K
- Following400
- Followers4.3K
- Likes9.7K
Pinned Tweet
Here are the slides for my keynote, 'Mobile Exploitation, the past, present, and the future' at #Zer0Con2023. Zer0con was a blast as always, thank you @POC_Crew!! 🚀💫
github.com/externalist/prese…
Ahn Ki Chan retweeted
SPTM - The Last Bits: Concluding our deep and pioneering research into #SPTM and #GXF df-f.com/blog/sptm4
#DFF #DFFENDERS
Ahn Ki Chan retweeted
Our new blog post is live: blog.dfsec.com/ios/2025/05/3…
Ahn Ki Chan retweeted
#POC2024 Ding-Dong 😎
Kicking off with @qwertyoruiopz with Keynote speech. We are fully packed
Ahn Ki Chan retweeted
After 3 years, we finally managed to write our first blog post about a powerful XNU infoleak patched in 17.1
blog.dfsec.com/ios/2023/11/1…
Ahn Ki Chan retweeted
The rounds are on us at the #HEXACON2023 Social Event! DM us your favorite cocktail and we'll do our best to have the top requests available
Ahn Ki Chan retweeted
Our very first blog post: “iOS 17, new version, new acronyms” #iOS17 #DFF #sptm #txm
df-f.com/blog/ios17
Ahn Ki Chan retweeted
"In mid-2022, @Google Project Zero was provided with access to pre-production hardware implementing the ARM MTE specification. This blog post series is based on that review, and includes general conclusions about the effectiveness of MTE as implemented"
googleprojectzero.blogspot.c…
Ahn Ki Chan retweeted
Sharing another V8 Sandbox design document more widely: docs.google.com/document/d/1…
This one discusses how to protect code pointers - probably the most performance sensitive part touched by the sandbox - with (almost) no performance overhead.
Ahn Ki Chan retweeted
🎮PS5 enthusiasts! Specter's talk is here!
⚡Specter @SpecterDev presented the evolving attack surface, modern mitigations like Supervisor Mode Access Prevention (SMAP) etc + internal workings of the PS5's hypervisor
▶️youtu.be/HBFDjfmIUis
#hw_ioUSA2023 #gamingconsole
Ahn Ki Chan retweeted
Here are my slides from my @0x41con presentation on Apple’s Lockdown Mode:
blacktop.github.io/presentat… Enjoy 🎉
⚠️ Ironically the slides won't load when you have Lockdown Mode enabled 💀
See README for more info here - github.com/blacktop/presenta…
Ahn Ki Chan retweeted
qualys.com/2023/07/19/cve-20… SSH agent forwarding just became even more dangerous. 😂-- leave it to the creative minds at Qualys to turn a series of dlopen()+dlclose() calls (of unrelated/benign shared libraries) into arbitrary code exec, hats off!
Ahn Ki Chan retweeted
The @0x41con lives on because of the hardcore diehard fans it gained over the years who offered to organize and keep it alive. It takes time, effort & money to give you the experience for free.
Mad props @Simone_Ferrini, @f_roncari, @jndok for hosting the 4th ed. It was amazing!
Ahn Ki Chan retweeted
I presented my Lockdown Mode research at @0x41con today and it was a dream come true ❤️ I started my iOS research journey ~5yrs ago & always dreamt of just attendin let alone presentin with such legends. This has been a tremendous honor! Thank u @xerub & @Simone_Ferrini et al.
Ahn Ki Chan retweeted
The Old, The New and The Bypass - One-click/Open-redirect to own Samsung S22 at Pwn2Own 2022
written by @testanull
starlabs.sg/blog/2023/06-the…
Thanks to @thezdi for reviewing and inputs to the blog post. Greatly appreciate that.
Ahn Ki Chan retweeted
This time I'll look at CVE-2022-46395, an Arm Mali GPU driver UAF I found by analysing Jann Horn's CVE-2022-36449. I'll also use a technique of Jann Horn to win a very tight race to gain arbitrary kernel code execution and root from untrusted Android app. github.blog/2023-05-25-rooti…
