[email protected]

iOS syscall trace in Wireshark

It's supposed to be deperecated, but just updated and published bagbak@5 for frida@17 github.com/ChiChou/bagbak - New approach for decrypting Extension process with better stability - Removed SSH / scp infavor of on-device Zip compression and frida-only transmission, much faster

Runtime Objective-C classdump inside VSCode, both classes and protocols marketplace.visualstudio.com/items?itemName…

no need for command line dump now

Frida Workbench for VSCode v0.11.5 marketplace.visualstudio.com/items?itemName… - Enhanced auto complete for classes and methods, both Java and ObjC - Explore classses and modules, generate hook template directly Reposting because of a critical bug between 0.11.0-0.11.4, do not use them

@arekfurt No this is a platform specific IPC, not related to network traffic at all

The general idea here.... How many times have you been using Wireshark and wished that you could easily see what was actually generating/responding to the network traffic on the host? (For me, I think it's pretty much every time I've used Wireshark.)

@patrickwardle By the time of writing that tweet (was 6 years ago 😅), it used unexported symbol from libobjc. There are 2 undocumented, but higher level APIs available

@patrickwardle Well, for objc loader x.com/CodeColorist/s…

A 'fix' 😈 github.com/pwardle/Reflec…

@InteBNLdItalia 🤮 cocksucking bank

@yo_yo_yo_jbo @patrickwardle dylib is not *fileless*

@patrickwardle I believe SpectreOps did it first! posts.specterops.io/dylib-loads-th…

Indeed 😅 ...but lots of time till the #OBTS v9 CFP opens

@MasterMike88 @SecLists Look at the screenshot he provided. He woke up from 6:40 and one hour later his phone is full but still charging at hand, and somehow his room has no cellular connection

@CodeColorist @SecLists this individual is literally the definition of blatant AI slop and paranoia and it's not close

Security folks, please be aware of this Joseph Goydish II (jgoyd) account on GitHub. Everything is llm made up misinformation garbage. He actively promotes his own links to @SecLists for engagement farming. He used to have Reddit account and substack blog, but somehow deleted

@atlien404770 @SecLists PAY ME

@CodeColorist @SecLists So US Cert takes in vulnerability reports, reviews them, then opens a cases for issues that are not real? This logic is flawed.

@atlien404770 @SecLists From now on, each hour I spend on your BS, I charge 2k USD

@CodeColorist @SecLists Getting an automated reply from Apple and an invitation to participate in vulnerability disclosure from US CERT, are 2 completely different things.

After his reaction I feel relieved because it’s more likely delusion instead of state hackers that I should fear

@atlien404770 @SecLists 你知道“吊销”是什么意思吗

@atlien404770 @SecLists Twitter does not allow deleting other person's replies fyi. DON'T BE LAZY, check if your certs are still valid

@atlien404770 @SecLists DON'T BE LAZY. Bro desperately looking for insult

@SecLists Taking down the replies I sent to that guy now in case I got poisoned somewhere one day

@SecLists Atlanta is now 6:40am in the morning. Bro gets up so early

@atlien404770 @kmkz_security @SecLists 国家信息安全漏洞共享平台没有英文界面，给我们讲讲你的中文在哪里学的