@theevilbit

macOS Security -- Trail running 🏃 -- Mountains ⛰ -- Tolkien fan For mountain pictures, go to: https://xitter.cf/t.co/Xf7KDW5fKu

 Hungary
theevilbit.github.io/
Joined April 2010
  • Tweets14.9K
  • Following1.1K
  • Followers8.9K
1KMedia
Our next macOS Vulnerability Researcher trainings with @gergely_kalman will be: 📆 2026-10-12 - 15: Self-organized, 4 (!!!!) day training (Budapest, Hungary) 📆 2026-11-15 - 17: Objective by the Sea v9 (Hawaii, USA) More info here: macosvuln.training/
8
48
5,708
Exploiting Reversing (ER) Series | Article 10: iOS Security Research (part 01) 223 pages, free. The first article in the series aimed at iOS itself, and the opening of a multi-part sequence. Published on: blackstormsecurity.com/resea… This article will be published on exploitreversing.com/ next week. I would like to thank Ilfak Guilfanov (@ilfak) and Hex-Rays SA (@HexRaysSA) for the continuous support. Hope you enjoy the read! #iOS #Apple #VulnerabilityResearch #ExploitDevelopment #ReverseEngineering
4
97
391
18,483
Csaba Fitzl retweeted
Jaron Bradley@jbradley89Oct 22
Using process coalitions in the XNU kernel to benefit incident response process trees. A short writeup on some updates I made to the TrueTree project themittenmac.com/blogs/proce…

Process Coalitions in the XNU Kernel

Estimating Process Responsibility Without Root

themittenmac.com
1
15
1,183
🍎 💾 Link to my slides and talk recording "macOS Mounting Madness" is up on my site: theevilbit.github.io/talks/

Talks and Workshops

macOS Exploit Mixtape – Hack Like it's the 80s /CA: Gergely Kalman/ (Zer0Con)

theevilbit.github.io
9
31
1,559
Shoutout to our Principal Security Researcher, @theevilbit , for the 56 vulnerabilities he submitted that put Iru on the board of the top 10 companies reporting CVEs in Apple.
3
1
10
457
#OBTS v9.0 is officially SOLD OUT! 🎉🌴 Registration is now closed, but if you're still hoping to join us in Maui, get on the waitlist! 📩 [email protected] A few spots usually open up as the conference gets closer, so there's still a chance! 🤞
3
13
1,316
Csaba Fitzl retweeted
macsysadmin@macsysadminOct 20
Not sure what to watch tonight? Pick a session from the Top 5 List at MacSysAdmin Conference 2026. Platform SSO - All Grown Up! From Zero-Touch to Zero-Trust Orchestrate Your Deployment Infrastructure as… Claude? You’re Not Home Alone macsysadmin.se #msa2026

MacSysAdmin Conference

The MacSysAdmin Conference is the event for all Apple device administrators to gain new knowledge and insights.

macsysadmin.se
4
1
5
696
🗒️ Recipe: @gergely_kalman + @theevilbit + ☕️☕️☕️☕️☕️ = 🎉New vulns Every. Single. Time. 😱
2
3
19
1,571
🏝️ 🌺 🌊 Do you want to spend 3 days (or 6) in this location? Do you have some year-end budget left that you need to spend? Fear no more! We got you covered with @gergely_kalman ! Just come to our "macOS Vulnerability Researcher" training, which will be at Nov. 15th - 17th, in Maui, Hawaii. Then stay for the conference. ➕ As a side effect: you will gain a ton of macOS knowledge with the likelihood that you will find some cool 0days after, and earn 💰 ➕ ➕ Bonus: You will have a chance to meet some of the best minds of the macOS attack and defense space at the conf. We only have a few spots left, so don't overthink it, just sign up. More info here: objectivebythesea.org/v9/tra…
1
5
1
14
2,898
Microsoft macOS devs should take our macOS exploitation training with @gergely_kalman . 🤪 We have a few places left for our Hawaii 🏝️ training. Just saying. Submitted a macOS LPE to MSRC. 🍿
2
2
26
2,837
🍎 Closing the week strong, with a 💻 chain: 1️⃣ App TCC bypass -> allows modifying NIB files 2️⃣ DirtyNib reborn without user interaction -> Inject to any* GUI app 3️⃣ Get more TCC bypass + Full LPE ⏭️ Hunting for more privs *non launch constrained
2
3
49
3,126
Csaba Fitzl retweeted
johnny
@0xjohnnyOct 17
Open-sourced CryptSn0w, our now obsolete untethered iOS ≤27/≤A20 Pro jailbreak via rare Apple server-side TSS/Cryptex bug. PATCHED, educational only. NOT a working jb Built w @GenericCoding @D4RK7ET. SBInject: @htrowii. Help: @Jakeashacks @forcequitOS github.com/0xjohnnydev/crypt…

GitHub - 0xjohnnydev/cryptsn0w: Obsolete iOS jailbreak research using the now-patched TSS/Cryptex...

Obsolete iOS jailbreak research using the now-patched TSS/Cryptex bug. Source shared for educational purposes. Not a new jailbreak release. - 0xjohnnydev/cryptsn0w

github.com
14
86
5
731
77,954
✔️ It's a wrap! We are done with our very first 4 day version of our macOS Vulnerability Researcher training with @gergely_kalman Lot of jaw dropping moments, sometimes even for us. 🙈 At the moment we don't know when we will do another 4️⃣ day again.
7
37
1,817
Iru TI finished off September strong! Cristian posted a blog breaking down PamStealer and Csaba put in overtime applying pressure to Apple. Excited for what's next to come 👀 iru.com/blog/pamstealer xitter.cf/theevilbit/status/2102…

PamStealer comes to Intel Macs: Analyzing the x86_64 build of a Rust macOS stealer

An in-depth analysis of the PamStealer malware, highlighting its sophisticated credential harvesting techniques and cross-platform capabilities on macOS systems.

iru.com
Csaba Fitzl
@theevilbitSep 22
So apparently according to Apple: MITMing an encrypted communication to a service on the LAN and sniffing clear text password is... fine. "We’re unable to identify a security issue in your report." 🤷‍♂️
2
1
12
22,377
Seventeen years later… The time has come for Machinarium 2 🦾🔧 Wishlist NOW on Steam.
495
2,671
948
14,869
742,828
Csaba Fitzl retweeted
macsysadmin@macsysadminOct 7
We are happy to announce that we have updated our AppleTV-app, our web archives, and our YouTube channel with this year’s sessions. Enjoy! macsysadmin.se #msa2026

MacSysAdmin Conference

The MacSysAdmin Conference is the event for all Apple device administrators to gain new knowledge and insights.

macsysadmin.se
5
11
574
1
4
360
🍎🫜 macOS Teaser: Sandboxed user to root LPE.
1
10
135
5,147
h4c.team/en/posts/90

How Apple MIE Makes UAF Exploitation Harder? — TeamH4C

How Apple MIE Makes UAF Exploitation Harder? Memory corruption bugs are a recurring starting point in sophisticated attacks targeting mobile devices. At...

h4c.team
6
35
2,854
Apple decided to further investigate this. 🙏 maybe it’s not fine after all.
Csaba Fitzl
@theevilbitSep 22
So apparently according to Apple: MITMing an encrypted communication to a service on the LAN and sniffing clear text password is... fine. "We’re unable to identify a security issue in your report." 🤷‍♂️
1
2
85
12,038
As I promised, Exploiting Reversing (ER) series: article 10 | iOS Security Research (part 01) is available on my blog now: exploitreversing.com/2026/10… The primary source for new articles is blackstormsecurity.com/resea…, but articles will continue to be published on my blog with a one-week delay. Enjoy the reading and have an excellent day. #iOS #VulnerabilityResearch #ExploitDevelopment #ReverseEngineering #KernelSecurity
2
66
1
336
14,564
Load more