Testing TLS/SSL encryption: testssl.sh

testssl.sh is a free command line tool which checks a server’s service on any port for the support of TLS/SSL ciphers, protocols as well as some cryptographic flaws. It’s designed to provide clear output in any case. Testing TLS/SSL encryption: testssl.sh Key features Clear output: you can tell...

Apple Mac OSX 10.11 - FTS Deep Structure of the FileSystem Buffer Overflow

Apple Mac OSX 10.11 - FTS Deep Structure of the FileSystem Buffer Overflow MacOS X 10.11 FTS Deep structure of the file system Buffer Overflow Credit: Maksymilian Arciemowicz CXSECURITY Website: http://cxsecurity.com/ http://cert.cx/ Affected software: - MACOS's Commands such as: ls, find, rm -...

Mac OS X 10.11 FTS Buffer Overflow

MacOS X 10.11 FTS Deep structure of the file system Buffer Overflow Credit: Maksymilian Arciemowicz CXSECURITY Website: http://cxsecurity.com/ http://cert.cx/ Affected software: - MACOS's Commands such as: ls, find, rm - iPhone 4s and later, - Apple Watch Sport, Apple Watch, Apple Watch Edition a...

Mac OS X 10.11 FTS Deep Structure of the File System Buffer Overflow Exploit

Mac OS X version 10.11 suffered from an FTS deep structure of the file system buffer overflow vulnerability. MacOS X 10.11 FTS Deep structure of the file system Buffer Overflow Credit: Maksymilian Arciemowicz CXSECURITY Website: http://cxsecurity.com/ http://cert.cx/ Affected software: - MACOS's...

MacOS X 10.11 Hardlink Resource Exhaustion

/ MacOS X 10.11 hardlink bomb cause resource exhaustion Avast PoC Credit: Maksymilian Arciemowicz CXSECURITY Website: http://cxsecurity.com/ http://cert.cx/ Affected software: - Commands such as: zip, tar, find - AntiVirus: Avast, Eset32 Let's back to an old bug, which Apple does not patch until...

MacOS X 10.11 FTS Buffer Overflow

MacOS X 10.11 FTS Deep structure of the file system Buffer Overflow Credit: Maksymilian Arciemowicz CXSECURITY Website: http://cxsecurity.com/ http://cert.cx/ Affected software: - Commands such as: ls, find, rm - probably more Apple file system suffer for a issue recognised in FTS library. The ma...

Immunity Canvas: OSX_RSH_LIBMALLOC

Name| osxrshlibmalloc ---|--- CVE| CVE-2015-5889 Exploit Pack| CANVAS Description| OS X rsh/libmalloc local privilege escalation Notes| Repeatability: Multiple Times Notes: Exploit should work on many different versions of MacOS X 64bit, but it has been specifically tested on: - 10.10.3 - 10.10.1...

Apple MAC OS X < 10.9/10 - Local Root Exploit

Exploit for macOS platform in category local exploits / osx-irony-assist.m Copyright c 2010 by Apple MACOS X include import import / where you want to write it! / define BACKDOORBIN "/var/db/.AccessibilityAPIEnabled" int doassistivecopyconst char spath, const char dpath NSAutoreleasePool pool =...

Symantec Encryption Desktop Installed (MacOS X)

Binary data macosxsymantecencryptiondesktopinstalled.nbin...

Autodesk SketchBook Pro < 6.2.5 / SketchBook Copic Edition < 2.0.2 Heap Buffer Overflow

The version of Autodesk SketchBook installed on the remote Mac OS X host is Pro prior to 6.2.5 or Copic Edition prior to 2.0.2. It is, therefore, affected by a heap-based buffer overflow vulnerability. The flaw exists when decompressing RLE-compressed channel data in PSD files, since user-supplie...

MacOS X EvoCam 3.6.7 HTTP GET 缓冲区溢出漏洞

No description provided by source...

Mac OS X xnu <= 1228.3.13 (zip-notify) Remote Kernel Overflow PoC

No description provided by source. / xnu-appletalk-zip.c Copyright c 2008 by [email protected] Apple MACOS X xnu = 1228.3.13 appletalk zip-notify remote kernel overflow PoC by mu-b - Sun 13 Apr 2008 - Tested on: Apple MACOS X 10.5.1 xnu-1228.0.21/RELEASEI386 Apple MACOS X 10.5.2...

AppleFileServer 10.3.3 - LoginEXT PathName Overflow (OS X)

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Mac OS X xnu <= 1228.x (hfs-fcntl) Local Kernel Root Exploit

No description provided by source. !/bin/bash xnu-hfs-fcntl-v2.sh Copyright c 2008 by [email protected] Apple MACOS X 792.0 = xnu = 1228.x local kernel root exploit by mu-b - Sat 14 June 2008 - Tested on: Apple MACOS X 10.4.8 xnu-792.14.14.obj1/RELEASEI386 Apple MACOS X 10.4.9...

Mac OS X xnu <= 1228.3.13 (profil) Kernel Memory Leak/DoS PoC

No description provided by source. / xnu-profil-leak.c Copyright c 2008 by [email protected] Apple MACOS X xnu = 1228.3.13 local kernel memory leak/DoS POC by mu-b - Sat 16 Feb 2008 - Tested on: Apple MACOS X 10.5.1 xnu-1228.0.21/RELEASEI386 Apple MACOS X 10.5.2 xnu-1228.3.131/RELEASEI386 -...

Apple Mac OS X Server 10.0 Overload Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/306/info A vulnerability in the MacOS X Server may crash it while under heavy load. The vulnerability appears while stress testing a server running the Apache web server and 32 or more process are concurntly doing HTTP GE...

Apple MACOS X xnu <= 1228.9.59 Local Kernel Root Exploit

No description provided by source. / xnu-workq-v2-64.c Copyright c 2008 by [email protected] Apple MACOS X xnu = 1228.9.59 local kernel root exploit by mu-b - Sat 16 Feb 2008 - Tested on: Apple MACOS X 10.5.1 xnu-1228.0.21/RELEASEI386 Apple MACOS X 10.5.2 xnu-1228.3.131/RELEASEI386...

Apple MACOS X xnu <= 1228.x Local Kernel Memory Disclosure Exploit

No description provided by source. / xnu-getldt.c Copyright c 2008 by [email protected] Apple MACOS X xnu = 1228.x local kernel memory disclosure by mu-b - Wed 17 Dec 2008 - Tested on: Apple MACOS X 10.5.5 xnu-1228.8.201/RELEASEI386 props to christer who originally found the bug in FreeBSD...

Apple Mac OS X xnu <= 1228.0 super_blob Local kernel Denial of Service PoC

No description provided by source. / xnu-superblob-dos.c Copyright c 2007 by [email protected] Apple MACOS X xnu = 1228.0 local kernel DoS POC by mu-b - Mon 10 Dec 2007 - Tested on: Apple MACOS X 10.5.1 xnu-1228.0.21/RELEASEI386 assert trip or bcopy NULL, .... in csvalidatepage by causing hashe...

Apple MacOS X 10.x SecurityServer Daemon Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9332/info Apple MacOS X SecurityServer has been reported prone to a denial of service vulnerability that may be triggered by a local user. The issue may be triggered under certain circumstances when a large password for a...