Finding iOS Kernel Exploit // SockPuppet Jailbreak - CVE-2019-8605

Channel:
United States LiveOverflow
Subscribers:
920,000
Published on ● Video Link: https://www.youtube.com/watch?v=YV3jewkUJ54


Duration: 23:45
157,669 views
5,626

Ned Williamson of Google Project Zero explains how he discovered the Sock Puppet vulnerability affecting the XNU Kernel in iOS and macOS. He also shows us what primitives the bug provides and how it can be exploited. This is only the first stage of a Jailbreak, but it's a very valuable kernel bug.

Google Project Zero Blog: https://googleprojectzero.blogspot.com/2019/12/sockpuppet-walkthrough-of-kernel.html
Ned on Twitter: https://twitter.com/NedWilliamson
Ned Williamson - Modern Source Fuzzing (OffensiveCon19): https://www.youtube.com/watch?v=xzG0pLM4Q64

-=[ โค๏ธ Support ]=-

โ†’ per Video: https://www.patreon.com/join/liveoverflow
โ†’ per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join

-=[ ๐Ÿ• Social ]=-

โ†’ Twitter: https://twitter.com/LiveOverflow/
โ†’ Website: https://liveoverflow.com/
โ†’ Subreddit: https://www.reddit.com/r/LiveOverflow/
โ†’ Facebook: https://www.facebook.com/LiveOverflow/



Other Videos By LiveOverflow


2019-12-20Traveling to London for Escal8 and Google CTF
2019-12-19Python 2 vs 3 for Binary Exploitation Scripts
2019-12-18File Path Race Condition & How To Prevent It - bin 0x31
2019-12-17Writing a Simple Buffer Overflow Exploit
2019-12-16Exploit Dev Pitfall Corrupted Shellcode
2019-12-15New to Linux? Need Help Understanding Shell Commands?
2019-12-14Self-aware Video: it knows its own YouTube Video ID?
2019-12-13Patching Binaries (with vim, Binary Ninja, Ghidra and radare2)
2019-12-12How Do Linux Kernel Drivers Work? - Learning Resource
2019-12-11Public Penetration Test Reports - Learning Resource
2019-12-10Finding iOS Kernel Exploit // SockPuppet Jailbreak - CVE-2019-8605
2019-12-09HACKERSPACES ARE AWESOME!
2019-12-08How To Learn Hacking With CTFs
2019-12-07WHY YOUR HACKING QUESTIONS ARE FRUSTRATING!!!
2019-12-06Cannot access memory at address // Debugging PIE Binaries affected by ASLR - bin 0x2E
2019-12-05Best Operating Systems for Hacking?!
2019-12-04Reversing Statically-Linked Binaries with Function Signatures - bin 0x2D
2019-12-03Finding main() in Stripped Binary - bin 0x2C
2019-12-02SECRET HACKER FORUM - The Place Where We Talk and Learn
2019-12-01Exploit Fails? Debug Your Shellcode - bin 0x2B
2019-11-27Zero-day vulnerability in Bash - Suidbash Google CTF Finals 2019 (pwn)


Tags:
Live Overflow
liveoverflow
hacking tutorial
how to hack
exploit tutorial
XNU kernel
macos hack
osx hacked
ios hack
jailbreak
sockpuppet
sock puppet
use after free
fuzzing kernel
kernel fuzzer
syscall fuzzer
fuzz testing
ned williamson
ipv6 sockets
protobuf
asan
advanced exploitation
memory corruption
free malloc