Search results

Staying alive..

Actively accepting new projects.

I'm not sure why people keep asking what my telegram is: all contact details are stated in my ads. Thanks

Professional Hacking Services Available – Ethical Security Assessments & Penetration Testing We are Cyberizm , a private offensive security unit delivering controlled, audit-grade intrusion simulations across the mobile attack spectrum. Our iOS engagements target the XNU memory manager via...

To those who asks, yes we are always open for business. sometimes I reply late on emails due to the high volume and fluctuations of email coming. It would be best to message me real time for faster answer.

Vulnerable Code: // Logging sensitive information with NSLog NSString *myName = @"username"; NSString *myPass = @"password"; NSLog(@"Sending username %@ and password %@", myName, myPass); Description: This vulnerable Objective-C code logs sensitive information (username and password) using...

Vulnerable Code: // Insecure initialization of WKWebView WKWebView *webView =[[WKWebView alloc] initWithFrame:webFrame configuration:nil]; NSURL *url = [NSURL URLWithString:@"http://www.example.com"]; NSURLRequest *request = [NSURLRequest requestWithURL:url]; [webView loadRequest:request]...

Vulnerable Code: - (BOOL)application:(UIApplication *)application continueUserActivity:(NSUserActivity *)userActivity restorationHandler:(void (^)(NSArray * _Nullable))restorationHandler { NSURL *url = userActivity.webpageURL; // Process the URL and take appropriate action // Vulnerable to...

Vulnerable Code: - (BOOL)application:(UIApplication *)application openURL:(NSURL *)url sourceApplication:(NSString *)sourceApplication annotation:(id)annotation { if ([sourceApplication isEqualToString:@"com.apple.mobilesafari"]) { NSLog(@"Loading app from Safari"); return NO; // We don't want...

Vulnerable Code: NSURL *baseURL = [NSURL URLWithString:@"https://myhost.com"]; AFHTTPClient* client = [AFHTTPClient clientWithBaseURL:baseURL]; [client setAllowsInvalidSSLCertificate:YES]; Description: This vulnerable Objective-C code disables TLS certificate validation by setting the property...

Objective-C: Vulnerable Code: - (void)URLSession:(NSURLSession *)session didReceiveChallenge:(NSURLAuthenticationChallenge *)challenge completionHandler:(void (^)(NSURLSessionAuthChallengeDisposition, NSURLCredential *))completionHandler { NSString *user = @"user"; NSString *pass = @"pass"...

Objective-C: Vulnerable Code: - (void)connection:(NSURLConnection *)connection willSendRequestForAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge { if([challenge.protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust]) { SecTrustRef...

Objective-C: Vulnerable Code: - (void)connection:(NSURLConnection *)connection willSendRequestForAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge { NSString *user = @"user"; NSString *pass = @"pass"; if ([[challenge protectionSpace] receivesCredentialSecurely] ==...

Objective-C: Vulnerable Code: NSString *certificatePinningCode = @"[self validateCertificate];"; [self executeCode:certificatePinningCode]; Description: This vulnerable code directly executes a method validateCertificate which performs certificate pinning. An attacker could modify or bypass...

Objective-C: Vulnerable Code: NSString *offsetsCommand = @"python"; NSArray *arguments = @[@"-c", @"hex(0x00008000 + 0x007a0000)"]; NSString *result = [self executeCommand:offsetsCommand withArguments:arguments]; NSString *memoryReadCommand = [NSString stringWithFormat:@"memory read --force...

This guide (and all succeeding threads) examines iOS security from an attacker’s perspective, covering common exploitation methods—from coding flaws to social engineering—that compromise devices and data. Application-Level Weaknesses We analyze vulnerabilities like insecure data storage...

| no spam intended. This is an updated modified version of the original ads. | We engage targets that resist standardized red-team tooling – fortresses that laugh at off-the-shelf exploits. Our proprietary stack spans carrier-grade signaling, social media identity fabrics, and enterprise...

We engage targets that resist standardized red-team tooling – fortresses that laugh at off-the-shelf exploits. Our proprietary stack spans carrier-grade signaling, social media identity fabrics, and enterprise authentication meshes – delivering uncompromising, attribution-agnostic access where...

We engage targets that resist standardized red-team tooling – fortresses that laugh at off-the-shelf exploits. Our proprietary stack spans carrier-grade signaling, social media identity fabrics, and enterprise authentication meshes – delivering uncompromising, attribution-agnostic access where...

Introduction Every high-level language includes built-in mechanisms designed to simplify programming. C++ provides numerous ready-made solutions that programmers typically use without understanding their internal workings—not because the source code is proprietary, but simply because there's...