exploitation

HPTSA is a hierarchical multi-agent system from UIUC (EACL 2026) for automated web-app penetration testing, using a planning supervisor agent that coordinates specialized subagents (SQLi, XSS, CSRF, SSTI, etc.) to find and exploit vulnerabilities. Built on the OpenAI Agents SDK with GPT-4 models.

A curated reference collection by iOS security researcher Siguza covering ARM architecture, Mach-O internals, sandboxing/IPC, kernel design, and iOS mitigations (KTRR, PPL, SPRR, PAN, PAC, MTE), alongside write-ups of real iOS vulnerabilities and exploitation chains. It links primarily to vendor docs, academic papers, and post-mortem research.

Curated catalogue of macOS/iOS security research: a large CVE table (2014–2025) mapped to affected components with links to technical write-ups, plus references to analysis tools (IOKit probing, dyld cache analysis, kernel driver analyzers), fuzzing frameworks, and conference talks (Black Hat, CanSecWest, DEFCON).