@gap_dev

Vulnerability Researcher in KR 👋 /  / [email protected]

 Seoul, Republic of Korea
github.com/GAP-dev
Joined July 2025
  • Tweets55
  • Following126
  • Followers421
25Media
DongHa Lee retweeted
V4bel
@v4belOct 16
Galaxy S26 Ultra: untrusted_app → root. Introducing "Infinity Core": 6 vulns in the Linux kernel's core subsystems. Their impact spans Linux server LPE, container escape, and Android LPE. Details: github.com/V4bel/InfinityCor…
19
104
6
839
52,780
Learn macOS vulnerability research from Gergely (@gergely_kalman) & Csaba (@theevilbit) at #OBTS v9! More on their training + all our other #OBTS trainings: objectivebythesea.org/v9/tra…
Gergely Kalman
@gergely_kalmanSep 23
Listen to the man, he knows's what he's talking about. Coincidentally this will be in our training. Just saying...
2
15
2,324
DongHa Lee retweeted
Paweł Huryn
@PawelHurynSep 23
I finally tested GPT-6 Sol on a real work. 2 repos. 105 hidden bugs. Find and fixed what you can. It looks like a huge degradation. The results: - GPT-6 Astra (max): 45 - GPT-5.6 Sol (max): 43.5 - Opus 5.5 (max): 41.7 - Muse Spark 1.3 (max): 32.2 - GPT-6 Sol (max): 29.3 Until you measure the cost (API-equivalent): - GPT-6 Astra (max): $33.04 - GPT-5.6 Sol (max): $95.25 - Opus 5.5 (max): $58.53 - Muse Spark 1.3 (max): $18.11 - GPT-6 Sol (max): $9.93 More effort levels (xhigh, high, medium, low) dropping in this thread today 🧵
272
131
87
2,066
653,340
I got the latest iOS and macOS 27 booting in Qemu (with SPTM!) - Virtual iPhone 17, 16, 15, 14, 13, 12 and every M1-M5 Mac supported - Debug, patch, or modify everything: kernel, SPTM, TXM, launchd, dyld, user programs all modifiable/ GDB-able - Boots directly to root shell in seconds - Run your own programs as root in iOS/ macOS, no jailbreak / kernel patches required - SPTM, TXM, MTE/MIE, genter/ gexit, GXF/SPRR/GL0-2, AMCC, AIC v1-3, Apple timer, many sysregs - Automated setup; get running in just a few minutes - Runs anywhere qemu runs... no ARM CPU required 😉 Try it here: github.com/jprx/darwin-vm

GitHub - jprx/darwin-vm: Run iOS/ macOS in Qemu. Virtual iPhone 17, 16, 15, 14, 13, 12 and M5-M1...

Run iOS/ macOS in Qemu. Virtual iPhone 17, 16, 15, 14, 13, 12 and M5-M1 Apple Si Macs supported. - jprx/darwin-vm

github.com
41
388
31
2,684
291,149
DongHa Lee retweeted
Tom Dörr
@tom_doerrAug 22
Runs macOS on iPad to enable pro apps like Xcode and Terminal directly on the device github.com/nfzerox/VirtualMa…
12
52
5
675
75,002
DongHa Lee retweeted
Muqsit 𝕏@mqst_Aug 19
Modern iOS Security Features – A Deep Dive into SPTM, TXM, and Exclaves Paper: arxiv.org/pdf/2510.09272 Author: Moritz Steffin and Jiska Classen
2
159
1
712
33,356
We’re excited to announce that the NDSS Symposium 2027 will take place in Seoul, Republic of Korea. This marks an exciting next chapter for the symposium that reflects the global reach of cybersecurity research. Read more: internetsociety.org/blog/202…
1
3
2
17
5,477
DongHa Lee retweeted
Hyungyu Seo@wh1te4everJul 8
Had some fun with new usbliter8 bootrom exploit. Got root shell yesterday by booting custom iOS 27.0b2 firmware on iPhone 11 Pro. Honestly, it's not practical for daily use. For some reason, baseband, Wi-Fi, and USB connections are completely broken.
10
50
3
410
57,772
NVIDIA da acceso gratis por API a modelos de IA. A DeepSeek V4, MiniMax M2.7, GLM 5.1, Gemma 4... Perfecto para pruebas de desarrollo. Puedes usarlo con OpenCode y OpenClaw Puedes conseguir acceso aquí: → build.nvidia.com/models
Captura de la web de NVIDIA Build en la sección “Models”, mostrando un listado de modelos de IA optimizados por NVIDIA con el filtro “Free Endpoint” activado. Se ven 156 modelos disponibles, tarjetas como deepseek-v4-flash, deepseek-v4-pro, glm-5.1 y glm-4.7, además de buscador, filtros por casos de uso y ordenación por “Most Recent”. NVIDIA sacando buffet libre de modelos como quien no quiere la cosa.

ALT Captura de la web de NVIDIA Build en la sección “Models”, mostrando un listado de modelos de IA optimizados por NVIDIA con el filtro “Free Endpoint” activado. Se ven 156 modelos disponibles, tarjetas como deepseek-v4-flash, deepseek-v4-pro, glm-5.1 y glm-4.7, además de buscador, filtros por casos de uso y ordenación por “Most Recent”. NVIDIA sacando buffet libre de modelos como quien no quiere la cosa.

30
230
23
2,321
195,718
[1/2] CVE-2026-32223: heap overflow in usbprint.sys (IOCTL 0x220064). Malformed USB descriptor, Named Pipe spray + Ghost Chunk for kernel leak, forged IRP, SYSTEM. Writeup: enki.co.kr/en/media-center/b… #CVE_2026_32223 #WindowsKernel #LPE #vulnresearch
3
58
164
11,282
DongHa Lee retweeted
Hyungyu Seo@wh1te4everFeb 21
Some demo about running Virtual iPhone using Apple Virtualization framework: youtu.be/3vvrU0YGKCQ
6
37
272
28,848
🤌🔥 "Build a Fake Phone, Find Real Bugs Qualcomm GPU Emulation and Fuzzing with LibAFL QEMU" media.ccc.de/v/39c3-build-a-…

Build a Fake Phone, Find Real Bugs

Mobile phones are central to everyday life: we communicate, entertain ourselves, and keep vast swaths of our digital lives on them. That ...

media.ccc.de
1
54
287
26,685
On Apple Silicon, the GPU by default cannot use more than about 75% of the system's total memory, but you can change this setting easily. I use my own script for that and set it up to 98% on M3 Ultra 512GB. gist.github.com/ivanfioravan…

Script to set MLX memory limits

Script to set MLX memory limits. GitHub Gist: instantly share code, notes, and snippets.

gist.github.com
14
43
1
444
39,490
🍎☕️ A new LPE for macOS Tahoe. 100% reliable, instant root. <3 Shared work with @gergely_kalman . That coffee shop was awesome 😎
7
24
261
29,271
DongHa Lee retweeted
0xor0ne
@0xor0ne7 Nov 2025
Guide to fuzzing the Binder kernel driver using the Linux Kernel Library (LKL) androidoffsec.withgoogle.com… Credits Eugene Rodionov, Gulshan Singh and Zi Fan Tan #infosec
5
28
142
8,019
Here is the video showing the sb escape (from screensaver) with root LPE
4
14
1,279
DongHa Lee retweeted
matteyeux@matteyeux14 Oct 2025
Awesome paper about latest iOS security mitigations : SPTM, TXM, and Exclaves arxiv.org/pdf/2510.09272
1
75
2
268
26,152
First CVE from Apple. Looking forward to more.
3
1
65
4,536
DongHa Lee retweeted
Samuel Groß@5aelo1 Aug 2025
We released our Fuzzilli-based V8 Sandbox fuzzer: github.com/googleprojectzero… It explores the heap to find interesting objects and corrupts them in a deterministic way using V8's memory corruption API. Happy fuzzing!

Add V8SandboxFuzzer · googleprojectzero/fuzzilli@675eccd

This is a basic fuzzer for the V8 Sandbox. It uses the memory corruption API to implement a random-but-deterministic (given a seed) traversal through the V8 heap object graph and corrupts some obje...

github.com
2
71
290
24,986
Load more