Recent content by Cyberizm

Staying alive..

Actively accepting new projects.

I'm not sure why people keep asking what my telegram is: all contact details are stated in my ads. Thanks

Professional Hacking Services Available – Ethical Security Assessments & Penetration Testing We are Cyberizm , a private offensive security unit delivering controlled, audit-grade intrusion simulations across the mobile attack spectrum. Our iOS engagements target the XNU memory manager via...

To those who asks, yes we are always open for business. sometimes I reply late on emails due to the high volume and fluctuations of email coming. It would be best to message me real time for faster answer.

Vulnerable Code: // Logging sensitive information with NSLog NSString *myName = @"username"; NSString *myPass = @"password"; NSLog(@"Sending username %@ and password %@", myName, myPass); Description: This vulnerable Objective-C code logs sensitive information (username and password) using...

Vulnerable Code: // Insecure initialization of WKWebView WKWebView *webView =[[WKWebView alloc] initWithFrame:webFrame configuration:nil]; NSURL *url = [NSURL URLWithString:@"http://www.example.com"]; NSURLRequest *request = [NSURLRequest requestWithURL:url]; [webView loadRequest:request]...

Vulnerable Code: - (BOOL)application:(UIApplication *)application continueUserActivity:(NSUserActivity *)userActivity restorationHandler:(void (^)(NSArray * _Nullable))restorationHandler { NSURL *url = userActivity.webpageURL; // Process the URL and take appropriate action // Vulnerable to...

Vulnerable Code: - (BOOL)application:(UIApplication *)application openURL:(NSURL *)url sourceApplication:(NSString *)sourceApplication annotation:(id)annotation { if ([sourceApplication isEqualToString:@"com.apple.mobilesafari"]) { NSLog(@"Loading app from Safari"); return NO; // We don't want...

Vulnerable Code: NSURL *baseURL = [NSURL URLWithString:@"https://myhost.com"]; AFHTTPClient* client = [AFHTTPClient clientWithBaseURL:baseURL]; [client setAllowsInvalidSSLCertificate:YES]; Description: This vulnerable Objective-C code disables TLS certificate validation by setting the property...

Objective-C: Vulnerable Code: - (void)URLSession:(NSURLSession *)session didReceiveChallenge:(NSURLAuthenticationChallenge *)challenge completionHandler:(void (^)(NSURLSessionAuthChallengeDisposition, NSURLCredential *))completionHandler { NSString *user = @"user"; NSString *pass = @"pass"...

Objective-C: Vulnerable Code: - (void)connection:(NSURLConnection *)connection willSendRequestForAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge { if([challenge.protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust]) { SecTrustRef...

Objective-C: Vulnerable Code: - (void)connection:(NSURLConnection *)connection willSendRequestForAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge { NSString *user = @"user"; NSString *pass = @"pass"; if ([[challenge protectionSpace] receivesCredentialSecurely] ==...

Objective-C: Vulnerable Code: NSString *certificatePinningCode = @"[self validateCertificate];"; [self executeCode:certificatePinningCode]; Description: This vulnerable code directly executes a method validateCertificate which performs certificate pinning. An attacker could modify or bypass...

Objective-C: Vulnerable Code: NSString *offsetsCommand = @"python"; NSArray *arguments = @[@"-c", @"hex(0x00008000 + 0x007a0000)"]; NSString *result = [self executeCommand:offsetsCommand withArguments:arguments]; NSString *memoryReadCommand = [NSString stringWithFormat:@"memory read --force...