corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a087ec-ac82-70fa-b63e-e73d60427290

Launch and Environment Constraints Deep Dive

theevilbit.github.io · published 9 October 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at theevilbit.github.io Wayback capture
1blogs citing
First cited
31 Jul 2025
Most recent
31 Jul 2025
Rank this month
not ranked
Links from this post
32
Words captured
3,860

Cited by

Blog
In the post
Date
wts.dev
CVE-2025-43253: Bypassing Launch Constraints on macOS Read at the source ↗
31 Jul 2025

Links from this post

Link
Host
https://mastodon.social/@xnyhps@infosec.exchange
mastodon.social
https://twitter.com/_xpn_
twitter.com
Bypassing MacOS Privacy Controls Read at the source ↗
blog.xpnsec.com
https://twitter.com/_r3ggi
twitter.com
Change home directory and bypass TCC aka CVE-2020-27937 Read at the source ↗
wojciechregula.blog
https://twitter.com/yo_yo_yo_jbo
twitter.com
https://www.microsoft.com/en-us/security/blog/2022/01/10/new-macos-vulnerability-powerdir-could-lead-to-unauthorized-user-data-access/
microsoft.com
https://gist.github.com/LinusHenze/4cd5d7ef057a144cda7234e2c247c056
gist.github.com
https://developer.apple.com/documentation/kernel/cs_launch_type_t?changes=latest_major&language=objc
developer.apple.com
https://github.com/m1stadev/PyIMG4
github.com
https://github.com/CRKatri/trustcache
github.com
https://gist.github.com/theevilbit/a6fef1e0397425a334d064f7b6e1be53
gist.github.com
https://holtstrom.com/michael/tools/asn1decoder.php
holtstrom.com
https://github.com/andrivet/python-asn1/tree/master
github.com
CVE-2019-20057 - Secure coding XPC services - Part 1 - Why EvenBetterAuthorization is not enough? Read at the source ↗
theevilbit.github.io
Secure coding XPC Services - Part 2 - Checking CS (CodeSigning) flags of the client Read at the source ↗
theevilbit.github.io
CVE-2020-0984 - Secure coding XPC Services - Part 3 - Incorrect client verification Read at the source ↗
theevilbit.github.io
CVE-2020-14978 - Secure coding XPC Services - Part 4 - Improved client authorization Read at the source ↗
theevilbit.github.io
CVE-2020-14977 - Secure coding XPC Services - Part 5 - PID reuse attacks Read at the source ↗
theevilbit.github.io
Learn XPC exploitation - Part 1: Broken cryptography Read at the source ↗
wojciechregula.blog
Learn XPC exploitation - Part 2: Say no to the PID! Read at the source ↗
wojciechregula.blog
Learn XPC exploitation - Part 3: Code injections Read at the source ↗
wojciechregula.blog
https://developer.apple.com/documentation/foundation/nsxpcconnection/3943309-setcodesigningrequirement?language=objc
developer.apple.com
https://twitter.com/R3dF09
twitter.com
https://xlab.tencent.com/en/2021/01/11/cve-2020-9971-abusing-xpc-service-to-elevate-privilege/
xlab.tencent.com
https://twitter.com/patch1t
twitter.com
https://jhftss.github.io/CVE-2022-26712-The-POC-For-SIP-Bypass-Is-Even-Tweetable/
jhftss.github.io
Abusing Electron apps to bypass macOS' security controls Read at the source ↗
wojciechregula.blog
MacOS Injection via Third Party Frameworks Read at the source ↗
blog.xpnsec.com
https://developer.apple.com/documentation/security/applying_launch_environment_and_library_constraints?language=objc
developer.apple.com
https://developer.apple.com/documentation/security/defining_launch_environment_and_library_constraints?language=objc
developer.apple.com
https://developer.apple.com/videos/play/wwdc2023/10266/?time=326
developer.apple.com