Karol Mazurek

@karmaz95

@dfsec_com

/dev/null github.com/karmaz95 Joined December 2019

155 Following 908 Followers 386 Posts

Latest posts 5

Pinned post

Karol Mazurek @karmaz95 Jul 14, 2025

Thanks @8ksec for the recent #ARM64 #CTF. I wish to see Battleground continue to grow! In the blog below, I have gathered some learning resources about ARM64 that will save others' time. Additionally, you'll find a write-up about one of the challenges.
patreon.com/posts/arm64-re…

www.patreon.com ARM64 Reference for Vulnerability Researchers | Karol Mazurek Last month, I was browsing the news on X and came across an 8ksec post about some free arm64 challenges they organized. I had taken a long b

Karol Mazurek @karmaz95 Nov 21, 2025

The blog post about how #macOS stored authentication tokens in persistent file metadata via the kMDItemWhereFroms key after download.
afine.com/how-macos-file…

afine.com Mac Extended Attributes Expose Authentication Tokens in macOS Mac extended attributes vulnerability exposed authentication tokens in macOS file metadata via kMDItemWhereFroms. Apple patched silently.

Karol Mazurek @karmaz95 Oct 27, 2025

Short post about LPE and TCC Bypass on macOS through third-party apps bundled with Sparkle framework - a reminder of why XPC services should validate their clients.

afine.com/threats-of-unv…

afine.com Threats of Unvalidated XPC Clients on macOS A technical deep dive into XPC client validation vulnerabilities on macOS, featuring case studies on CVE-2025-10015 and CVE-2025-10016 in the Sparkle framework.

Karol Mazurek @karmaz95 Sep 18, 2025

Shout out to Xeno Kovah for #OST2 "Vulnerabilities 1001 & 1002: C-Family Software Implementation Vulnerabilities" courses. I learned a ton. Many CVE examples are available for practice with clear guidance and explanations. Highly recommend it for vulnerability hunters and devs.

Karol Mazurek @karmaz95 Sep 15, 2025

Since #Microsoft does not care, and the grace period is over, here is the Hardened Runtime bypass they introduced through .NET MAUI on #macOS. All applications built with it are vulnerable. The #vulnerability has existed probably since 2019.

afine.com/breaking-harde…

afine.com Zero Day Vulnerability Microsoft Delivered to macOS - AFINE - digitally secure Microsoft's .NET MAUI framework for macOS contains a zero day vulnerability that bypasses the Hardened Runtime protection on macOS.