Now the iOS on QEMU project has most iOS original services, SSH , full disk images and a textual frame buffer, contact us if you want to participate! github.com/alephsecurity/… github.com/alephsecurity/…

Our recent update enables communication with iOS on QEMU via TCP sockets, including SSH! Lev Aronsky explains the inner workings of our solution: alephsecurity.com/2020/03/29/xnu…

New features added to our project's repository! * iOS on QEMU KVM support * ASLR disabled for user mode * TFP0 for user apps * CoreTrust patched - no need for static trust cache Check it out and feel free to contribute! github.com/alephsecurity/…

Another milestone for iOS on QEMU! The project can now run with KVM! Go check out the new blog post by Lev Aronsky :) alephsecurity.com/2020/07/19/xnu…

#Ruckus has confirmed six additional CVEs for my latest research. I will present new RCEs on Ruckus devices using these vulnerabilities at #defcon28 #DEFCONSafeMode

Now you can hook kernel functions with custom code and sniff all mach messages passed in the system. github.com/alephsecurity/…

We are thrilled to present our follow-up research on Ruckus Wireless devices. Gal Zror found new critical vulnerabilities and managed to overcome the previous research fix. alephsecurity.com/2020/10/14/ruc…

Graphic framebuffer support! After a long while, found time for the iOS QEMU project and finally got graphics working on iOS 14! There's still a lot of work to arrange it but hope to release it soon with iOS 14 support.

Last week I've finished a vulnerability disclosure with Ubuntu Security (@[email protected]) of a few vulnerabilities I discovered in Ubuntu, they did an awesome job providing reliable fixes very quickly. I'll share more details about these vulnerabilities soon on Aleph Research. ubuntu.com/security/notic…

We're thrilled to publish our last #homograph #phishing attack post by Tanic. This time we found various implementation flaws in instant messaging clients. alephsecurity.com/2021/02/28/rev…

I just compiled #QEMU for AFL on Android! Now I can do blackbox #fuzzing from anywhere😉 #Noxpwaste

We are excited to share an #XXE vulnerability in the JDOM Java library! discovered by ST alephsecurity.com/vulns/aleph-20…

During the pandemic Itai Greenhut & Gal Zror decided to improve our own office wireless equipment by finding vulnerabilities in them. Check out our new blog post about that! @ArubaNetworks alephsecurity.com/2021/07/15/aru…

As per the Linux embargo policy, a potential LPE Linux kernel vulnerability Itai Greenhut discovered was made public today, 14 days after disclosure. Here are the details. alephsecurity.com/2021/10/20/sud…

Presenting a short walkthrough on our journey running QEMU AFL++ on android we've done a few months ago The Hacker's Choice (@[email protected]) alephsecurity.com/2021/11/16/fuz…

New research paper on smart air conditioner vulnerabilities found by the team: alephsecurity.com/2023/06/19/ele…

Our newest research about smart locks is up! Enjoy (and lock the doors!) alephsecurity.com/2024/02/20/kon…

As promised - after the first part discussing the nitty-gritty details of the research, here comes the juicy vulnerability report! Here's everything that could go wrong with your 2,000 ILS smart lock, culminating with a complete wireless takeover! alephsecurity.com/2024/03/07/kon…