NSEcho blog

Abusing WhatsApp update process on macOS

Hijacking update process to plant our own binary

Posted by NSEcho on 2024-05-07 14:10:44

CVE-2023-43976 - CatoNetworks macOS LPE

Exploiting notorization race conditions

Posted by NSEcho on 2023-12-28 13:53:24

Certified iOS Security Engineer

Review of the Certified iOS Security Engineer certification

Posted by NSEcho on 2023-11-29 19:30:20

Fuzz iOS URL schemes with furlzz

Crashing Bear app with simple fuzzing

Posted by NSEcho on 2023-09-17 09:59:09

Tunnelblick Local Privilege Escalation

Abusing .ovpn files to gain privilege escalation

Posted by NSEcho on 2023-08-01 17:23:07

Tunnelblick Arbitrary File Overwrite

Using hardlinks to overwrite root owned files

Posted by NSEcho on 2023-07-30 10:12:06

CVE-2023-39107 - NoMachine Arbitrary File Overwrite

Using hardlinks to overwrite root owned files

Posted by NSEcho on 2023-07-21 19:09:42

CVE-2023-33298 - Perimeter81 Local Privilege Escalation

Exploiting XPC HelperTool to gain LPE

Posted by NSEcho on 2023-06-30 00:38:03

GObjCResolv

Creating ObjC resolver in Golang

Posted by NSEcho on 2023-05-15 23:44:08

CVE-2023-27574 - Shadowsocks-NG code execution

Exploiting get-task-allow for code execution

Posted by NSEcho on 2023-03-05 13:45:06