inficere

inficere 基于 fractalG 的 onyx-the-black-cat（https://github.com/gdbinit/onyx-the-black-cat）构建的 Mac OS X rootkit 公开版本 仅在 Mountain Lion 10.8.2 至 10.8.5 上测试过。不保证在其他版本上能正常工作。 功能 进程隐藏——对 'ps PID'、'ps aux'、活动监视器、top 等隐藏 文件/目录隐藏 用户隐藏——对 'who'、'w' 隐藏指定用户 自隐藏——对 kextstat 和 volatility 隐藏模块本身 反终止 PID 转 UID 0...

CVE-2026-64747

CVE-2026-64747 — AppleAVE2 カーネルドライバ：ワイヤーフォーマット＋到達可能性PoC CVE-2026-64747 の根本原因分析と macOS 到達可能性概念実証コードです。macOS 26.6（kext 905.40.1）で修正された、AppleAVE2 ビデオエンコーダーカーネル拡張（com.apple.driver.AppleAVE2）のバッファオーバーフローに関するものです。 AppleAVE2 —...

CVE-2026-64705

CVE-2026-64705 — HFS xattr カーネルヒープオーバーフロー macOS CVE-2026-64705 の根本原因分析と概念実証コード。macOS Sonoma 14.8.7 HT127117 で修正された HFS カーネルエクステンションのバッファオーバーフローです: HFS — 影響: アプリが予期しないシステム終了やカーネルメモリへの書き込みを 引き起こす可能性があります。バッファオーバーフローは境界チェックの改善により 対処されました。 PoC は武器化された HFS+ ディスクイメージです。これをマウントし、細工された拡張属性を 読み取ることで、HFS...

EUVD-2018-15925

Malware in sbrugna...

EUVD-2020-9353

Malware in sbrugna...

EUVD-2016-8479

Malware in sbrugna...

EUVD-2017-16070

Malware in sbrugna...

EUVD-2020-9352

Malware in sbrugna...

EUVD-2017-5342

Malware in sbrugna...

EUVD-2021-7243

Malicious code in bioql PyPI...

CVE-2021-1779

A logic error in kext loading was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. An application may be able to execute arbitrary code with system privileges...

Apple macOS Security Feature Issue Vulnerability (CNVD-2024-17859)

Apple macOS is a specialized operating system developed by Apple for Mac computers. A security signature issue vulnerability exists in Apple macOS prior to version 11.4, which originates in the Kext Management subsystem, and can be exploited by a local attacker to bypass implemented security...

Exploit for Out-of-bounds Write in Apple Macos

CVE-2021-30853 A simple POC script to test for CVE-2021-30657...

CVE-2021-1779

A logic error in kext loading was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. An application may be able to execute arbitrary code with system privileges...

CVE-2021-1779

A logic error in kext loading was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. An application may be able to execute arbitrary code with system privileges...

CVE-2021-1779

CVE-2021-1779 affects the IOKit component on macOS (Big Sur 11.0.1, Catalina 10.15.7, Mojave 10.14.6). A logic error in kext loading was addressed with improved state handling, allowing an application to potentially execute arbitrary code with system privileges. Apple lists remediation in macOS B...

Apple macOS process_token_BindQueryStoreRegisterToMemoryList Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AppleIntelKBLGraphic...

Apple macOS Security Breach

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that originates from a logical error in kext loading in IOKit. A native application can execute arbitrary code using elevated privileges. The vulnerability exist...

Trend Micro Antivirus for Mac Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Antivirus for Mac. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Trend Micro Antivirus for Mac Error Message Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Trend Micro Antivirus for Mac. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...