user avatar
nedwill
@NedWilliamson
supporting the humans in the loop; PPP for life
Joined January 2012
Posts
  • Pinned
    user avatar
    I was honored to serve as an invited expert at the DARPA ISAT CLASH workshop on AI-enabled cybersecurity earlier this month. Nearly 10 years after participating in CGC, it's a thrill to see the vision extending another decade ahead. Grateful to LTC Chase Hasbrouck for leading
  • user avatar
    My iOS 12.2 exploit is now available! Thanks again to Brandon for his help in getting through the Mach trenches from BSD. bugs.chromium.org/p/project-zero…
  • user avatar
    My fuzzer for the iOS kernel networking stack is now open source! You can read the implementation details here:
  • user avatar
    I managed to get kernel_task port using only CVE-2019-8605 for iOS 12.2 (tested on iPhone 6s+) :) Still needs quite a bit of work for stability. Huge thanks to @_bazad for his assistance in achieving a goal I have had for over a decade...
  • user avatar
    CVE-2022-26757 is my first report using a new technique to find race conditions deterministically. The featured protobuf testcase repros 100% of the time on my internal SockFuzzer branch. I will discuss and open source this technique at Black Hat 2022! bugs.chromium.org/p/project-zero…
  • user avatar
    I got almost 100% reliability for iPhone 5s w/ 12.2. Several changes to Sock Puppet were necessary. Just doing some final improvements. My changes will make the exploit faster and more reliable on all devices, even those already working.
  • user avatar
    My first blog post! tl;dr starting with VirtualBox
  • user avatar
    Activision banned me for attempting security research on Call of Duty Warzone's netcode!
  • user avatar
    Learn how found and exploited SockPuppet for iOS 12.4, featuring a bonus collaboration with LiveOverflow! googleprojectzero.blogspot.com/2019/12/sockpu… youtube.com/watch?v=YV3jew…
  • user avatar
    When I reported CVE-2019-8605 I could only repro it on macOS with root user. I've found a way to reach it from the app sandbox on iOS. Don't update to 12.3 needlessly while I continue to investigate!
  • user avatar
    github.com/googleprojectz… SockFuzzer v3 is out. It's probably time to share that my last day at Project Zero will be tomorrow and I'll be taking some time off before starting a new role. I hope everyone has had a wonderful summer and my sincere appreciation goes to the Project
  • user avatar
    Excited to start the new year with CVE-2020-3842 :) It's a fun one and unlike the other bugs I reported so far so I'm looking forward to (responsibly) disclosing it.
  • user avatar
    Hi, can anyone help me get in touch with Activision's product security team? I'd like to report a vulnerability in Call of Duty Warzone.
  • user avatar
    A couple months overdue, here's the open source release of Concurrence, my new fuzzing library for thread-based targets. Integration code to SockFuzzer, plus Mach process/IPC/VM/etc. support are coming soon. Check it out at github.com/googleprojectz…