physmem

physmem physmem é uma ferramenta de inspeção de memória física e escalada de privilégio local direcionada ao macOS até a versão 10.12.1. Ela explora CVE-2016-1825 ou CVE-2016-7617 dependendo do alvo de implantação. Essas duas vulnerabilidades são quase idênticas, e a exploração pode ser feita...

Apple macOS 10.12.1 Kernel - Writable Privileged IOKit Registry Properties Code Execution

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=974 There are two ways for IOServices to define their IOUserClient classes: they can override IOService::newUserClient and allocate the correct type themselves or they can set the IOUserClientClass key in their registry entry. Th...

Apple macOS 10.12.1 Kernel - Writable Privileged IOKit Registry Properties Code Execution

Apple macOS 10.12.1 Kernel - Writable Privileged IOKit Registry Properties Code Execution / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=974 There are two ways for IOServices to define their IOUserClient classes: they can override IOService::newUserClient and allocate the...