104 matches found
DylibHijackTest
DylibHijackTest Requirements Install Python3 requirements: pip3 install -r requirements.txt Compile dylib from source because don't trust compiled things from GitHub: gcc -dynamiclib DylibHijackTest.c -o DylibHijackTest.dylib How it Works ⚠️ This will spawn many processes on your machine, run this...
bfinject
bfinject Easy dylib injection for jailbroken 64-bit iOS 11.0 - 11.1.2. Compatible with Electra and LiberiOS jailbreaks. bfinject loads arbitrary dylibs into running App Store apps. It has built-in support for decrypting App Store apps, and comes bundled with iSpy and Cycript. bfinject is a wrappe...
macOSTools
macOSTools Herramientas Ofensivas para macOS AUnit Proyecto de ejemplo XCode para Plugins de Audio Unit MigrationToolPayload Plugin de herramienta de migración SpecialDelivery Plugin de instalador authplugin Plugin de autenticación dylibinjection Código fuente para inyección de dylib. Basado en...
ios-malicious-bithunter
iOS Malicious Bit Hunter Resumen iOS Malicious Bit Hunter es un motor de detección de complementos maliciosos para aplicaciones iOS. Puede analizar el encabezado del archivo macho de la biblioteca dinámica dylib inyectada basándose en el tiempo de ejecución, y puede realizar análisis de...
CVE-2023-49313
CVE-2023-49313 A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data. Portable version...
Swift-Attack
Swift-Attack Pruebas unitarias para equipos azules para ayudar a construir detecciones para algunos métodos comunes de post-explotación en macOS. He incluido algunos ejemplos de post-explotación utilizando tanto el historial de línea de comandos como llamadas a la API. Los ejemplos de...
bfdecrypt
bfdecrypt Utility to decrypt App Store apps on jailbroken iOS 11.x Decrypt App Store apps on LiberiOS Here's an example using https://github.com/BishopFox/bfinject to decrypt the Reddit app on an Electra-jailbroken iPhone: root@kitploit: Cs-iPhone: root bash bfinject -P Reddit -l...
CVE-2025-65741
CVE-2025-65741 - Sublime Text 3 vulnerable a inyección de Dylib para macOS root@kitploit: Download: https://www.sublimetext.com/3 CVE: CVE-2025-65741 | https://nvd.nist.gov/vuln/detail/CVE-2025-65741 Author: Vinicius Batistella Version Affected: Sublime Text 3 Build 3208 or prior for macOS Detall...
CVE-2024-53407
CVE-2024-53407 In Phiewer 4.1.0, a dylib injection leads to Command Execution whichallow attackers to inject dylib file potentially leading to remote control and unauthorized access to sensitive user data in MacOs. Reproduce use the .dylib file to inject a command root@kitploit:...
CVE-2024-55503
CVE-2024-55503 Termius App MacOS dylib Inyección de comandos Descripción Un problema en termius anterior a v.9.9.0 permite a un atacante local ejecutar código arbitrario mediante un script manipulado en el componente DYLDINSERTLIBRARIES. usando dylib root@kitploit:...
PT-2026-47795
Name of the Vulnerable Software and Affected Versions Waves Central for macOS versions 13.0.9 through 16.5.5 Description A trusted XPC client component is signed with hardened runtime entitlements that allow dynamic library injection. A local attacker can use the DYLD INSERT LIBRARIES environment...
PT-2026-47796
1 Local Privilege Escalation via DYLIB Injection CVE-2026-24064 2 Local Privilege Escalation via Insecure XPC Client Validation CVE-2026-24065 Multiple Local Privilege Escalation Vulnerabilities in Waves Audio Waves Central https://t.co/fkys4ePhWy...
CVE-2026-24070
During the installation of the Native Access application, a privileged helper com.native-instruments.NativeAccess.Helper2, which is used by Native Access to trigger functions via XPC communication like copy-file, remove or set-permissions, is deployed as well. The communication with the XPC servi...
CVE-2026-24070
During the installation of the Native Access application, a privileged helper com.native-instruments.NativeAccess.Helper2, which is used by Native Access to trigger functions via XPC communication like copy-file, remove or set-permissions, is deployed as well. The communication with the XPC servi...
EUVD-2026-5108
During the installation of the Native Access application, a privileged helper com.native-instruments.NativeAccess.Helper2, which is used by Native Access to trigger functions via XPC communication like copy-file, remove or set-permissions, is deployed as well. The communication with the XPC servi...
CVE-2026-24070 Local Privilege Escalation via DYLIB Injection in Native Instruments Native Access
During the installation of the Native Access application, a privileged helper com.native-instruments.NativeAccess.Helper2, which is used by Native Access to trigger functions via XPC communication like copy-file, remove or set-permissions, is deployed as well. The communication with the XPC servi...
CVE-2026-24070: Untrusted Search Path
During the installation of the Native Access application, a privileged helper com.native-instruments.NativeAccess.Helper2, which is used by Native Access to trigger functions via XPC communication like copy-file, remove or set-permissions, is deployed as well. The communication with the XPC servi...
PT-2026-5657
Name of the Vulnerable Software and Affected Versions Native Instruments Native Access affected versions not specified Description The Native Access application installs a privileged helper, com.native-instruments.NativeAccess.Helper2, used for triggering functions via XPC communication, such as...
CVE-2023-49313
A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data...