@Andreas_Ch_

“Everyone sees what you appear to be, few experience what you really are.”

 127.0.0.1
chandreas.github.io
Joined October 2012
  • Tweets4.3K
  • Following370
  • Followers273
Andreas Christoforou retweeted
Ben@XploitBengineer4 Nov 2025
I posted a short blog about how a Samsung GPU vulnerability (CVE-2025-21479) can be leveraged for an LPE on affected devices xploitbengineer.github.io/CV…

Exploiting CVE-2025-21479 on a Samsung S23

Motivation A couple of years ago, I picked up a few of Samsung S23’s at Pwn2Own.

xploitbengineer.github.io
6
80
2
250
29,972
Andreas Christoforou retweeted
Dmitry Vyukov@dvyukov24 Oct 2025
More HW security goodness from Arm: community.arm.com/arm-commun… vMTE (Virtual Memory Tagging) allows to use MTE in a more flexible way, consuming less RAM. POE2 allows to build efficient in-process sandboxes and isolation. More-or-less improvement over x86 Memory Protection Keys.
Dmitry Vyukov@dvyukov14 Oct 2025
First mention of x86 memory tagging (aka MTE) by both Intel and AMD (codename ChkTag): community.intel.com/t5/Blogs… amd.com/en/blogs/2025/amd-an… 🤘🤘🤘

Search - Intel.com

Intel Search Results Page

intel.com
22
2
79
31,627
Andreas Christoforou retweeted
xvonfers@xvonfers24 Oct 2025
github.com/WebKit/WebKit/com…

[libpas] MTE-tag WebContent.EnhancedSecurity processes · WebKit/WebKit@6390f36

https://bugs.webkit.org/show_bug.cgi?id=300638 rdar://162538653 Reviewed by Mark Lam. Such processes are considered 'hardened' a la Lockdown Mode processes, at least with regards ...

github.com
xvonfers@xvonfers16 Oct 2025
libpas MTE github.com/WebKit/WebKit/com… github.com/WebKit/WebKit/com… github.com/WebKit/WebKit/com… github.com/WebKit/WebKit/com… github.com/WebKit/WebKit/com… github.com/WebKit/WebKit/com… github.com/WebKit/WebKit/com…
1
12
2,902
Andreas Christoforou retweeted
Blacktop@blacktop__22 Oct 2025
github.com/WebKit/WebKit/com…

[libpas] MTE-tag WebContent.EnhancedSecurity processes · WebKit/WebKit@6390f36

https://bugs.webkit.org/show_bug.cgi?id=300638 rdar://162538653 Reviewed by Mark Lam. Such processes are considered 'hardened' a la Lockdown Mode processes, at least with regards ...

github.com
1
1
1
21
6,446
Andreas Christoforou retweeted
Blacktop@blacktop__22 Oct 2025
So LDM will enable MTE in WebContent? 🤔
Blacktop@blacktop__22 Oct 2025
github.com/WebKit/WebKit/com…

[libpas] MTE-tag WebContent.EnhancedSecurity processes · WebKit/WebKit@6390f36

https://bugs.webkit.org/show_bug.cgi?id=300638 rdar://162538653 Reviewed by Mark Lam. Such processes are considered 'hardened' a la Lockdown Mode processes, at least with regards ...

github.com
1
15
4,247
Andreas Christoforou retweeted
Blacktop@blacktop__22 Oct 2025
NEW macOS 26.0 🥫🍝 sauce! 🎉 xnu: github.com/apple-oss-distrib… dyld: github.com/apple-oss-distrib… objc4: github.com/apple-oss-distrib… Security: github.com/apple-oss-distrib… Libsystem: github.com/apple-oss-distrib… Libc: github.com/apple-oss-distrib… - this post was generated by `ipsw` 🤖
2
23
2
105
13,879
Andreas Christoforou retweeted
Blacktop@blacktop__20 Oct 2025
High level diff of iOS 26.1 beta3 vs. iOS 26.1 beta4 🎉 github.com/blacktop/ipsw-dif…
1
2
16
1,743
Andreas Christoforou retweeted
Blacktop@blacktop__20 Oct 2025
iOS 26.1 beta4
1
14
1,571
security.apple.com/blog/memo…
59
Andreas Christoforou retweeted
j j@mistymntncop25 Aug 2025
Exploit and mini writeup for CVE-2025-5419. github.com/mistymntncop/CVE-…

CVE-2025-5419/exploit.js at main · mistymntncop/CVE-2025-5419

Contribute to mistymntncop/CVE-2025-5419 development by creating an account on GitHub.

github.com
8
60
2
270
29,352
New blog post: A journey in Android physical memory - writeup on exploiting recent GPU bug CVE-2025-21479 dawnslab.jd.com/android_gpu_…

漫步安卓物理内存：CVE-2025-21479 提权实录

背景 在大多数用户的印象里，GPU（图形处理器）是游戏流畅、视频绚丽的保障，是沉浸在虚拟世界背后的无名英雄。然而，在现代移动计算架构，尤其是在安卓生态中，GPU的角色早已超越了“图形画师”的范畴。它通过诸如OpenCL、Vulkan等通用计算框架，深度参与到机器学习、图像处理、甚至安全计算等关键任务中，成为了SoC（系统级芯片）中与CPU平起平坐的“第二颗大脑”。 正是这种权限与复杂性的与日俱增

dawnslab.jd.com
87
1
273
20,497
Andreas Christoforou retweeted
Andrey Konovalov@andreyknvl28 Jul 2025
Documented instructions for setting up KGDB on Pixel 8. Including getting kernel log over UART via USB-Cereal, building/flashing custom kernel, breaking into KGDB via /proc/sysrq-trigger or by sending SysRq-G over serial, dealing with watchdogs, etc. xairy.io/articles/pixel-kgdb

📲 Debugging the Pixel 8 kernel via KGDB

Instructions for getting kernel log, building custom kernel, and enabling KGDB on Pixel 8

xairy.io
5
142
1
456
34,978
Andreas Christoforou retweeted
Blacktop@blacktop__9 Jun 2025
NEW syscall/mach_trap
2
3
23
2,791
Andreas Christoforou retweeted
Blacktop@blacktop__9 Jun 2025
No MTE added to iPhone17,1
1
3
51
6,621
Andreas Christoforou retweeted
Alexander Popov@a13xp0p0v14 Apr 2025
Slides of my talk at #Zer0Con2025! ⚡️ Kernel-Hack-Drill: Environment For Developing Linux Kernel Exploits ⚡️ I presented the kernel-hack-drill open-source project and showed how it helped me to exploit CVE-2024-50264 in the Linux kernel. Enjoy! a13xp0p0v.github.io/img/Alex…
3
101
3
343
28,646
Andreas Christoforou retweeted
0xor0ne
@0xor0ne14 Jan 2025
Speculative Execution to break ARM’s Memory Tagging Extension (MTE) arxiv.org/pdf/2406.08719 #Linux #cybersecurity
3
39
1
156
8,888
Andreas Christoforou retweeted
0xor0ne
@0xor0ne29 Dec 2024
Breaking ARM’s Memory Tagging Extension with Speculative Execution (paper) arxiv.org/pdf/2406.08719 #cybsersecurity #Linux
2
42
171
11,380
Andreas Christoforou retweeted
Karol Mazurek@karmaz9517 Dec 2024
Just published an article on #Mach #IPC #security in #macOS: diving deep into how #XNU handles inter-process communication. Inside, you'll find detailed #RE techniques, #task port security analysis, and practical IPC #recon approaches. Enjoy! karol-mazurek.medium.com/mac…

Mach IPC Security on macOS

Introduction to Mach IPC and System Services security

karol-mazurek.medium.com
2
57
164
12,557
Andreas Christoforou retweeted
0xor0ne
@0xor0ne20 Nov 2024
TIKTAG: Breaking ARM’s Memory Tagging Extension with Speculative Execution arxiv.org/pdf/2406.08719 #Linux #cybersecurity
2
45
168
9,910
Andreas Christoforou retweeted
Brad Spengler@spendergrsec15 Oct 2024
Replying to @wipawel
@wipawel's CVE system today produced a dump of ~50 "interesting" Linux kernel CVEs. Walk through CVE-2024-26972 (current link: nvd.nist.gov/vuln/detail/CVE…, previous link: lore.kernel.org/linux-cve-an…) and its automated updates and see if you as an end-user can make heads or tails of it.
1
4
1
13
6,335
Load more