CVE-2018-4121

CVE-2018-4121 - Safari Wasm Sections POC RCE Exploit by MWR Labs c 2018 Details this proof of concept exploit targets Safari 11.0.3 13604.5.6 on macOS 10.13.3 17D47 versions only. compile the payload of your choice as a dylib with a constructor run python filetojsarray.py your.dylib payload.js...

duf

duf Disk Usage/Free Utility Linux, BSD, macOS & Windows Features User-friendly, colorful output Adjusts to your terminal's theme & width Sort the results according to your needs Groups & filters devices...

frida-ios-hook

Frida iOS hook 📍 A tool that helps you can easy using frida. It support script for trace classes, functions, and modify the return values of methods on iOS platform. 👉 For Android platform: frida-android-hook 👉 For Intercept Api was encrypted on iOS application: frida-ios-intercept-api Env OS...

CVE-2019-8627

CVE-2019-8627 a kernel information leak on macOS= 10.14.4 =============================== How to reproudce: 1. turn on firewall 2. run the proof of concept as root 3. disconnect Belkin USB-C LAN network and then connect the Belkin USB-C LAN network. after these operations you will get the leaked...

sudo_patch_CVE-2025-32463

sudopatchCVE-2025-32463 Mr.CIA's manual patching guide for CVE-2025-32463 Sudo local privilege escalation tested on Kali Linux and Ubuntu WSL. CVE-2025-32463 Sudo Patch Guide 🛡️ Eish, CVE-2025-32463 is a nasty local privilege escalation flaw CVSS 9.3 in Sudo 1.9.14–1.9.17, exploitable via the...

machscope

MachScope A native macOS binary analysis tool providing Mach-O parsing, ARM64 disassembly, and process debugging. Built entirely in Swift with zero external dependencies. Features...

MacOSThreatTrack

MacOS ThreatTrack v2.0 Enhanced security information gathering tool for macOS systems with advanced threat detection capabilities. Description MacOSThreatTrack is a comprehensive bash-based security reconnaissance tool designed for proactive detection of malicious activity on macOS systems. This...

CVE-2023-22524

Atlassian Companion RCE Vulnerability Proof of Concept CVE-2023-22524 Overview This repository contains a proof of concept PoC for the recently discovered remote code execution vulnerability in Atlassian Companion for macOS, identified as CVE-2023-22524. This critical issue allows attackers to...

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

DigiTrack

DigiTrack In 30 seconds, this attack can learn which networks a MacOS computer has connected to before, and plant a script that tracks the current IP address and Wi-Fi network every 60 seconds. Now includes: Hardtracker - Digispark VPN buster to send the IP address and BSSID/SSID of nearby Wi-Fi...

dd

dd Run Linux containers on macOS — with no VM. What is dd? dd runs Linux containers natively on Apple-Silicon macOS without a virtual machine. There is no Linux kernel and no hypervisor underneath: a JIT translates the container's code and services its Linux syscalls in userspace the gVisor / PRo...

CVE-2024-23742

CVE-2024-23742 An issue in Loom through 0.196.1 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. With this tool, we can check if the App is Vulnerable: After validation, we can inject our code, and get a shell Enjoy Your She...

CVE-2024-11467

CVE-2024-11467 The macOS operating system uses XPC services for basic inter-process communication between various processes, such as between the XPC Service daemon and third-party application privileged helper tools. The VMware Horizon Client, upon installation, registers the...

uac

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...

hyperhives-macos-infostealer-analysis

HyperHives macOS Infostealer — Full Technical Analysis Threat intelligence: Rust-based macOS universal binary infostealer delivered through a fake job interview pipeline on Wellfound formerly AngelList. The operator persona "Felix" from "HyperHive" lured targets into running a malicious installer...

gping

gping 🚀 Ping, but with a graph. Comes with the following super-powers: Graph the ping time for multiple hosts Graph the execution time for commands via the --cmd flag Custom colours Windows, Mac and Linux support Table of Contents Install 💿 Usage 🎷 Install 💿 macOS Homebrew: brew install gping...

awesome-security-hardening

awesome-security-hardening A collection of awesome security hardening guides, best practices, checklists, benchmarks, tools and other resources. This is work in progress: please contribute by sending your suggestions. You may do this by creating issue tickets or forking, editing and sending pull...

CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV

Executive summary macOS Music and TV do an insecure rename resulting in FDA by gaining full control over the user's TCC.db I reported this bug in separate tickets for each app, feel free to merge if applicable. The underlying problem is that these apps have FDA but fail to sanitize their file...

Malware

Malware macOS Malware Collection ⚠️ This page contains links to live malware! By downloading malware from this site, you waive all rights to claim any damages resulting from mishandling or self-infection. 📡 Running the samples, may results in connections to attack controlled infrastructure e.g...

PEASS-ng

PEASS-ng - Privilege Escalation Awesome Scripts SUITE new generation Linux Privesc official course to master LinPEAS Checkhttps://hacktricks-training.com/courses/lhe/ to learn tens of linux privesc techniques and master LinPEAS Basic Tutorial Here you will find privilege escalation tools for...