Zero-Click Calendar invite — Critical zero-click vulnerability chain in macOSCritical zero-click vulnerability chain in macOS (patched)Sep 12, 2024A response icon3Sep 12, 2024A response icon3
Alias file to rule them all — One click code execution with alias file in macOSSummary (TL;DR)Apr 25, 2023Apr 25, 2023
Published inSensorFuEscaping from a truly air gapped network via Apple AWDLIn the following post I go through how to escape from a truly air gapped network using Apple Wireless Direct Link -network and leveraging…Aug 3, 2021A response icon1Aug 3, 2021A response icon1
Published inSensorFuTest for network leaks, discover a product flaw and get vendor to fixPlot twist: this time it is not about us doing vulnerability research and reporting. This is a story about our customer in action, told to…Dec 14, 2020Dec 14, 2020
Published inSensorFuHow my application ran away and called home from RedmondI recently found a surprising leak vector in Windows 10 installations. We were porting our Beacon to Windows and for easy deployment…Oct 7, 2019A response icon3Oct 7, 2019A response icon3
Published inSensorFuSensorFu Beacon How To: 3 steps to always know if your isolated Linux leaksWhen you need to build isolated and strictly restricted Linux environments for special purposes you want to know it truly is and stays…Feb 20, 2019Feb 20, 2019
Published inSensorFuWhy Ethernet Broadcast Escape Tests MatterWe recently implemented a network escape to SensorFu Beacon that uses Ethernet broadcasts. Why? First of all you can test all the hosts in…Mar 2, 2018Mar 2, 2018
