Joined June 2013
Seeing (Mail)Demons? Ancient Trigger, Exploitation Technique, and a Bounty. MailDemon - Part II via @ZecOps blog blog.zecops.com/vulnerabilit… (post updated)
1
9
2
23
Seeing Mail(Demons)? Ancient Trigger, Exploitation Technique, and a Bounty. MailDemon - Part II via @ZecOps blog blog.zecops.com/vulnerabilit…
1
12
27
Did you see any email like this one? Or the one that we described in MailDemon blog? we'll announce a bounty related to it tomorrow. Stay tuned.
2
7
18
Here's our official response
You’ve Got (0-click) Mail! Unassisted iOS Attacks via MobileMail/Maild in the Wild via @ZecOps Blog blog.zecops.com/vulnerabilit…
4
128
21
222
Extremely thrilled to launch FreeTheSandbox.org today. Thanks for everyone supporting this initiative. Together we will #FreeTheSandbox 👊
3
35
4
92
Excited for #FreeTheSandbox initiative in 2020. Lots of plans and announcements are coming. Researchers and other key infosec folks (CISOs, Reporters, etc) expressed their support already. Brainstormed with @chronic today. Want to join/support #FreeTheSandbox? DM me!
5
10
1
45
We'll deliver another batch of #FreeTheSandbox stickers soon. If you support our cause and wish to receive stickers just fill out this form: docs.google.com/forms/d/e/1F… Please RT
2
8
1
24
ZecOps Task-For-Pwn 0 Bounty: TFP0 POC on PAC-Enabled iOS Devices <= 12.4.2 #FreeTheSandbox blog.zecops.com/vulnerabilit…
18
100
13
429
Replying to @tim_cook
Hi Tim, did you know that due to Sandbox restrictions you're *not allowed* to independently verify the integrity of your own Apple devices? This limitation helps attackers targeting iOS. We believe you understand it's a fundamental human right - please #FreeTheSandbox!
5
42
1
165
After the release of Checkm8, hundreds (maybe thousands) of researchers globally didn't sleep much and basically looked like this. Getting into DFU hundreds of times is quite tiring but soon the sandbox will be forever free for most iPhones/iPads! #FreeTheSandbox #Checkm8
41
311
30
1,532
Interested to learn how #Checkm8 works? Check out this writeup. Want to work on bootrom research full time and #FreeTheSandbox like a real ninja? Ping us with your resume at [email protected] Remote OK
"#checkm8: The iPhone Exploit That Hackers Use to Research Apple’s Most Sensitive Code" This is what the title of this write-up would be if it was a VICE article. This is a detailed write-up of the vulnerability I found and how the exploit really works. habr.com/en/company/dsec/blo…
3
14
59
We added A12 Bootrom exploits to Task-For-Pwn 0 competition! @ZecOps will grant up to $250,000 bounties for non-exclusive A12 bootrom exploits. Email submission details at blog.zecops.com/vulnerabilit… It's time to #FreeTheSandbox!
16
88
4
505
#FreeTheSandbox UPDATE: If you missed the 12.4 signing window and wish to investigate/analyze your device, - keep it on 12.4.1. We plan to release LPE granting TFP0 to enable iOS DFIR investigations. The bugs can also be used as a jailbreak for those who are interested.
78
182
26
830
Announcing Task For Pwn 0 (TFP0): Operation #FreeTheSandbox ! blog.zecops.com/vulnerabilit…
11
38
4
207
[BLOG] Analysis of a Stealthy MacOS / iOS Kernel Vulnerability blog.zecops.com/vulnerabilit…
1
53
115
Replying to @ZecOps
You can also sign up at: zecops.com/reverse-bounty #DEFCON
2
3
We are at #DEFCON27 CTF / chillout area. If you're interested to join ZecOps Private Reverse Bounty program, let us know! We're also expanding and hiring full/part time research/dev positions. All platforms! #DEFCON
1
3
3
Hawaiian style #DC2019
4
5
24