Private Crypter - Unique Private Stubs ◆ [#1] PURE RAT v4 // BEST HVNC RAT ◆ 🛒 View HF's Premium Marketplace ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Blackhat • Red Team • Offensive Security Keyloggers › [0-Day] Apple Keychain Vulnerability - Mac OSX and iOS

New Reply 
0-Day 

Apple Keychain Vulnerability - Mac OSX and iOS
cyberducky
cyberducky Away

***
HF Ub3r
Posts:
4,867
Threads:
127
Credibility:
200
Popularity:
535
βytes:
β 189.4
Game XP:
33
Jun 17, 2015 08:58 PM (This post was last modified: Jun 17, 2015 08:58 PM by cyberducky.)
Apple was quiet for six months without any idea of the huge vulnerability that left 88% of iDevices and Macs "completely exposed" to attacks.

Here is a video demonstrating the attack:



Link to the article about the vuln:
http://www.theregister.co.uk/2015/06/17/...litzkrieg/
Deany
Deany Offline
 
**********
Otaku
Posts:
61,080
Threads:
799
Credibility:
62700
Popularity:
4,200
βytes:
β 112.64
Game XP:
0
Jun 17, 2015 08:59 PM
Wow, Abide doing big things. Pls donut hack me sir.
[Image: oGzLpzM.gif]
cyberducky
cyberducky Away

***
HF Ub3r
Posts:
4,867
Threads:
127
Credibility:
200
Popularity:
535
βytes:
β 189.4
Game XP:
33
Jun 17, 2015 09:03 PM
(Jun 17, 2015 08:59 PM)Deany Wrote:  Wow, Abide doing big things. Pls donut hack me sir.

It is insane that a huge corporation like Apple went THAT LONG without a clue there was a problem.
Katana
Katana Offline
城和泉守所持
***
HF l33t
Posts:
1,330
Threads:
222
Credibility:
000
Popularity:
67
βytes:
β 0
Game XP:
0
Jun 17, 2015 09:05 PM
Exactly, who knows, after apple's so many messups, there are probably more exploits out there.
Deany
Deany Offline
 
**********
Otaku
Posts:
61,080
Threads:
799
Credibility:
62700
Popularity:
4,200
βytes:
β 112.64
Game XP:
0
Jun 17, 2015 09:05 PM
(Jun 17, 2015 09:05 PM)Katana Wrote:  Exactly, who knows, after apple's so many messups, there are probably more exploits out there.

How do you have a 100% warning level? 😯
[Image: oGzLpzM.gif]
Katana
Katana Offline
城和泉守所持
***
HF l33t
Posts:
1,330
Threads:
222
Credibility:
000
Popularity:
67
βytes:
β 0
Game XP:
0
Jun 17, 2015 09:12 PM (This post was last modified: Jun 17, 2015 09:13 PM by Katana.)
(Jun 17, 2015 09:05 PM)Deany Wrote:  How do you have a 100% warning level? 😯

Very few can withstand this much of a power level.
cyberducky
cyberducky Away

***
HF Ub3r
Posts:
4,867
Threads:
127
Credibility:
200
Popularity:
535
βytes:
β 189.4
Game XP:
33
Jun 17, 2015 09:25 PM
I also forgot to mention, thanks zYMPTOM for showing me this article.
w34k
w34k Offline
«Network Infiltrator |Ask Google ;}
****
HF Ub3r
Posts:
6,491
Threads:
26
Credibility:
000
Popularity:
11
βytes:
β 0
Game XP:
0
Jun 18, 2015 12:56 AM (This post was last modified: Jun 18, 2015 12:59 AM by w34k.)
It's not the first time a vulnerability within OS X has gone that long without being noticed. You think months is bad ? How about years for the recent exposed Rootpipe exploit ? I believe there are many vulnerabilities within OS X. It's just a matter of time before someone finds them and decides to come out about it.

PoC of the Rootpipe exploit.
https://truesecdev.wordpress.com/2015/04...apple-os-x
PM for help
BTC is welcome
*Crack hashes/WPA handshakes here* *Change IP here*


cyberducky
cyberducky Away

***
HF Ub3r
Posts:
4,867
Threads:
127
Credibility:
200
Popularity:
535
βytes:
β 189.4
Game XP:
33
Jun 18, 2015 07:36 AM
(Jun 18, 2015 12:56 AM)w34k Wrote:  It's not the first time a vulnerability within OS X has gone that long without being noticed. You think months is bad ? How about years for the recent exposed Rootpipe exploit ? I believe there are many vulnerabilities within OS X. It's just a matter of time before someone finds them and decides to come out about it.

PoC of the Rootpipe exploit.
https://truesecdev.wordpress.com/2015/04...apple-os-x

Of course it's not the first, but it's weiird that after the first iCloud breach, they haven't monitored it still. iCloud has been a target, but iCloud hasn't been a focus for their sec team.
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by YaRyaTchiJun 16, 2025 05:40 AM 7 565 Jun 16, 2025 05:40 AM
Last Post: codenamezero
by SweetLightsJun 12, 2025 04:16 PM 7 451 Jun 12, 2025 04:16 PM
Last Post: DKxSPAWN
by magicianunoDec 24, 2018 05:55 PM 0 148 Dec 24, 2018 05:55 PM
Last Post: magicianuno