Alexey Kovrizhnykh retweeted
For those who asked, a nice alternative for #ghidra by my colleague @TheJokiv github.com/DSecurity/efiSeek @MarcoFigueroa , please check this out :)
#efiXplorer v1.0 [REcon Editon] released! We try to make UEFI RE easier, current version of IDA plugin supports:
- EFI Protocols and Boot/Runtime Services identification
- EFI GUID's recogniton
Stay tuned more features coming!
github.com/binarly-io/efiXpl…
@yeggorv @p41ll @isciurus
Successfully ported checkm8 to S5L8942X using Arduino with MAX3421E-based USB host shield
Many thanks to @nyan_satan for debugging on iPad mini 1 EPVT and testing on production devices
PoC will be available soon
Now ported on S5L8940X and S5L8945X as well
Thanks to @nyan_satan for support and testing!
PoC will be available tomorrow
Here is the PoC:
github.com/a1exdandy/checkm8…
Alexey Kovrizhnykh retweeted
Thanks to @a1exdandy the port of #checkm8 to C/C++ (github.com/pgarba/King/) has support for the iPhone 6. He also figured out why libusb didn't work on windows so thank him for finally having #checkm8 support on windows 🙏👌
Alexey Kovrizhnykh retweeted
Replying to @a1exdandy
@a1exdandy has also added CPID:7000 (iPhone 6) and CPID:8000 (The other 6s) #checkm8 support!
Instructions here: gist.github.com/a1exdandy/ec…
Great work =)
Alexey Kovrizhnykh retweeted
Thanks to @a1exdandy, there is now #checkm8 support for the 6s!
I modified his patch slightly to work on CPID:8000 instead of 8003 as I have an 8000 6s.
Expect cool things in the near future ;)
Alexey Kovrizhnykh retweeted
Added S5L8747 & S5L8947 & S7002 & T8004 SecureROMs to securerom.fun
Thanks to @a1exdandy for the S5L8747 ROM and thanks to @a1exdandy and @chiptunext for the S7002 ROM
Alexey Kovrizhnykh retweeted
Apple Watch S0 Bootrom successfully dumped!
Big thx for @a1exdandy and @axi0mX
eta son
#checkm8 for Haywire
Only a memory dump is checked, there may be problems with other functionality
SecureROM of Haywire also in repo, enjoy!
github.com/a1exdandy/ipwndfu…
Thanks to @nyan_satan for usefull thread about Haywire
Alexey Kovrizhnykh retweeted
Want to filter multi-gigabyte log with regex and get instant result as you type?
This should help 😀
github.com/alexhude/Peculiar…
crauEmu was rewritten using new uEmu extension system!
github.com/DSecurity/crauEmu
Alexey Kovrizhnykh retweeted
Another great uEmu based tool to develop and analyse code-reuse attack payloads. cc @a1exdandy
github.com/DSecurity/crauEmu
Alexey Kovrizhnykh retweeted
CrauEmu has the best logo ever \O/
#ZeroNights #UnicornInside
Alexey Kovrizhnykh retweeted
Nice to see Unicorn was used for code analysis in this great writeup!
"#checkm8: The iPhone Exploit That Hackers Use to Research Apple’s Most Sensitive Code"
This is what the title of this write-up would be if it was a VICE article. This is a detailed write-up of the vulnerability I found and how the exploit really works. habr.com/en/company/dsec/blo…
Alexey Kovrizhnykh retweeted
"#checkm8: The iPhone Exploit That Hackers Use to Research Apple’s Most Sensitive Code"
This is what the title of this write-up would be if it was a VICE article. This is a detailed write-up of the vulnerability I found and how the exploit really works. habr.com/en/company/dsec/blo…
Alexey Kovrizhnykh retweeted
Meet the technical analysis of the famous #Checkm8 exploit. We`ll figure out what causes the non-fixable vulnerability in BootROM of most Apple devices, including iPhone X habr.com/ru/company/dsec/blo…
























