santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

arpy

Arpy Arpy는 Mac을 위한 사용하기 쉬운 ARP 스푸핑 MiTM 도구입니다. 다음의 3가지 대상 기능을 제공합니다: 패킷 스니핑 방문한 도메인 Gource를 이용한 방문 도메인 각 기능은 아래에서 설명됩니다. 테스트된 OS 현재까지 Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X 요구 사항 Python 2.7 Gource Scapy libdnet 설치 Gource root@kitploit: brew install gource Scapy root@kitploit: pip...

python-patrol

Python Patrol macOS 上で Python のインストールをスキャンし、CVE-2015-20107.py スクリプトを実行してパッチ適用が必要かどうかを報告します これらのスクリプトのいくつかはフルディスクアクセス権限が必要で、ルートとして実行する必要があります。これにより macOS ファイルシステム全体（macOS によって制限されている領域を除く）をスキャンできます。 フルディスクアクセス権限を持つアプリからこれを実行してください。つまり、Apple のシステム設定 セキュリティとプライバシー プライバシーとセキュリティで iTerm.app...

kemon

Kemon macOS 커널 모니터링을 위한 오픈 소스 사전 및 사후 콜백 기반 프레임워크. 속보 - 08/28/2019 macOS Catalina 10.15 Beta 7 릴리스 노트 https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes 엔드포인트 보안 kauth API가 제거되었습니다. 50419013 / 테스트 결과, 이러한 Kauth 인터페이스는 실제로 제거되지 않았으며 Kemon이 여전히 작동합니다. 하지만...

kemon

Kemon An Open Source Pre and Post Callback-based Framework for macOS Kernel Monitoring. Breaking News - 08/28/2019 macOS Catalina 10.15 Beta 7 Release Notes https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes Endpoint Security The kauth API has been...

pyre-check

!WARNING This Repository Is Archived This repository is no longer maintained and has been archived. Type checking: Pyre has been replaced by Pyrefly, our next-generation Python typechecker and language server. Security analysis Pysa: Pysa has moved to its own repository at github.com/facebook/Pys...

sinter

Sinter Sinter is a 100% user-mode endpoint security agent for macOS 10.15 and above, written in Swift. Sinter uses the user-mode EndpointSecurity API to subscribe to and receive authorization callbacks from the macOS kernel, for a set of security-relevant event types. The current version of Sinte...

gato

!WARNING This repository is deprecated and archived Gato has been superseded by Trajan , Praetorian's multi-platform CI/CD vulnerability detection and attack automation tool. Trajan consolidates GitHub Actions Gato and GitLab Glato CI/CD attack capabilities into a single, actively-maintained...

haxx

haxx Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1. Based on CoreTrustDemo, also please note that certificates are not copyrightable. Usage Note: requires macOS + existing jailbreak Get up and running This method works on 14.0-14.6. 14.7 14.7b1-14.8.1 requires launch...

appmon

AppMon에 오신 것을 환영합니다! 에서 선보였습니다: 미국 & 유럽 AppMon은 macOS, iOS 및 Android 네이티브 앱의 시스템 API 호출을 모니터링하고 변조하기 위한 자동화된 프레임워크입니다. Frida를 기반으로 합니다. 이 프로젝트는 Ole André Vadla Ravnås 덕분에 가능했으며, 이 프로젝트를 그에게 바칩니다. 그를 GitHub, Twitter에서 팔로우하세요. 다음 구성 요소로 이루어져 있습니다: AppMon Sniffer - 앱이 수행하는 흥미로운 작업을 파악하기 위해 API 호출을...

Pishi

Pishi Pishi is a static binary rewriting tool designed to instrument basic blocks in XNU kernel and in arbitrary macOS kernel extensions kexts. for XNU kernel, Pishi allows you to instrument at a function, file, or folder level. For example, you can instrument everything in the /bsd/net/ director...

osxcollector

OSXCollector Manual OSXCollector is a forensic evidence collection & analysis toolkit for OSX. Forensic Collection The collection script runs on a potentially infected machine and outputs a JSON file that describes the target machine. OSXCollector gathers information from plists, SQLite databases...

CVE-2022-26726-POC

CVE-2022-26726 Affected Versions As a student, I have limited access to devices in which I can test this vulnerability. The versions I have tested so far are MacOS 12.3.1, MacOS 12.3, MacOS 12.0, MacOS 10.15.7, and MacOS 11.6.1. The vulnerability works on all the versions tested on. So what is th...

chrome-vuln-scanner

Chrome脆弱性スキャナー 軽量で依存関係のない防御的 ツールです。インストールされているGoogle Chromeのバージョンを既知の脆弱性と照合し、わかりやすい視覚的なHTMLレポートを生成します。 機能 Chromeバージョンの自動検出 （macOS対応。--versionで手動指定も可能） 既知のCVEとの照合 （拡張可能な脆弱性データベース） 視覚的なHTMLレポート — 明確なVULNERABLE / SAFEステータスダッシュボード付き Use-After-Free（CWE-416）の教育用可視化 — 概念的なメモリ図 JSON出力 — CIやさらなる分析に対応 バイリン...

CVE-2026-0307

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

EUVD-2026-75257

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

CVE-2026-0307

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect app allow a non-administrative local user to escalate to NT AUTHORITY\SYSTEM on Windows or root on macOS and Linux, enabling arbitrary command execution with administrative privileges. The GlobalProtect ap...

CVE-2025-9074

CVE-2025-9074 – Full Docker Escape on Windows & macOS Docker Desktop 📌 Description Docker Desktop exposes the internal Docker Engine API at http://192.168.65.7:2375 to any running container — with no authentication and no access control. Because the engine itself can mount the host filesystem, a...

pwn2own2018

Pwn2Own 2018: Safari + macOS macOS 10.13.3 向けの Safari RCE、サンドボックス脱出、およびカーネルへの LPE。 使用方法 nasm と tornado をインストールします: root@kitploit: brew install nasm pip3 install tornado ホスト名やポートを変更したい場合は config.py を確認してください。その後、./server.py でサーバーを起動し、表示された URL にアクセスしてください。 概要 このエクスプロイトチェーンは、Safari 内で実行される JavaScri...