Siri-ously Leaky: Exploring Overlooked Attack Surfaces Across Apple's Ecosystem (DEF CON 33 & HOU.SEC.CON 2025)
Author: Richard Hyunho Im (@richeeta)
This repo contains my slide deck and demo videos for my DEF CON 33 main stage presentation on overlooked attack surfaces across Apple's ecosystem. I will deliver an updated version of this talk at HOU.SEC.CON 2025 on October 1, 2025 at 3 PM CT.
- Slides & all demos are attached to the v2.02 release.
- Talk recording (DEF CON 33 Main Stage, Track 4):
Direct download links below come from the GitHub Release; checksums are shown on the release page.
| File | What it shows |
|---|---|
| SiriouslyLeakyTalk.mp4 (Also on YouTube) | Full talk recording (DEF CON 33 main stage, Track 4) |
| AppleSEEDBAC.MP4 | Apple SEED BAC |
| AudiobookLeak.mov | Books Action Shortcut leaking last read audiobook title |
| ChatGPTLeak.mp4 | Siri→ChatGPT data exfil PoC (CVE-2024-44235 family) |
| CVE-2025-24198-ChatGPT-Leak.mov | ChatGPT conversation leak for CVE‑2025‑24198 |
| CVE-2025-24198-Safari-Leak.mov | Safari browsing leak for CVE‑2025‑24198 |
| CVE-2025-24225.mov | CVE‑2025‑24225 PoC |
| FilesSpoofing.mov | File spoofing in Files app |
| getsupportIDOR.mp4 | IDOR on getsupport.apple.com PoC (Screen Recording using Burp Intruder) |
| idor.py | IDOR on getsupport.apple.com Alternative PoC (Python script) |
| HiddenPhotosLeakviaSiri.mp4 | Hidden Photos leakage via Siri |
| Im.Siriously.Leaky.v2.02.pptx | Slide deck (v2.02) |
| PCCDataLeak.mp4 | Siri context confusion → Private Cloud Compute (PCC) data leak to ChatGPT |
| PhoneNumberSpoofing.mp4 | Phone number spoofing in Notes |
| SafariPunycodeConfusion.mp4 | URL Punycode confusion in Safari |
| ShortcutsRaceCondition.mp4 | Shortcuts race condition (Face ID bypass path) |
| SpeakScreenNotes.mov | Speak Screen reading beyond visible content in Notes widget on Lock Screen |
| StoreFrontBAC.mov | App Store storefront BAC #1 (initial access) |
| StoreFrontBAC2.mov | App Store storefront BAC #2 (inside the app) |
Im Siriously Leaky v2.02.pdf– lightweight PDF copy of slides (kept in repo).- Please see the Releases page for all PoCs and the final
.pptx. (Note: The PoC videos have been added individually, but the.pptxfile also includes all PoC videos, screenshots, and diagrams.)
- Most PoCs can only be reproduced on specific iOS/iPadOS versions (and certain app versions); please see slide notes for context.
- Please report issues via GitHub issues.
You're welcome to use, repurpose, and redistribute anything here for personal use, research, and any non-commercial purposes, but please cite/link back to this repo or the v2.02 release.
If you want to use any of this for something commercial, please reach out to me at richeeta AT proton DOT me first to discuss.
This project is shared under the Creative Commons Attribution–NonCommercial 4.0 International License.