CVE-2019-6203-PoC

CVE-2019-6203-PoC 所有 Apple 设备中都存在一个 PEAP 漏洞，攻击者可利用该漏洞强制任意 Apple 设备（iOS、macOS 或 tvOS）关联到恶意接入点。 这是 CVE-2019-6203 的 PoC，适用于 iOS 12.2、macOS 10.14.4，已在 Kali Linux 上测试。 你需要一张支持 AP 模式 的 Wi-Fi 网卡来运行此 PoC。你可以通过运行 iw list 来检查，输出类似： root@kitploit: Supported interface modes: IBSS managed AP AP/VLAN monitor...

EUVD-2026-74192

Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement...

CVE-2026-86819 Waves Central local privilege escalation via Improper XPC Client Authentication in macOS

Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement...

CVE-2026-86819

Waves Central for macOS contains a local privilege escalation in its privileged helper service. The root cause is improper XPC client authentication : the helper validates connecting clients by comparing the caller's code-signing certificate chain for equality with its own, rather than checking a...

CVE-2026-81192

CVE-2026-81192 is an untrusted search path vulnerability in the OpenTelemetry.Resources.Host NuGet package, affecting macOS only. The host.id resource attribute detector invokes sh and ioreg by bare name, resolving them through the PATH environment variable rather than by absolute path. A less-pr...

CVE-2026-81192 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...

CVE-2026-81192 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...

CVE-2026-65400

CVE-2026-65400 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage このプロジェクトは、以下のような安全で許可された環境でのみ使用してください。 ローカル仮想マシン Docker コンテナ 分離されたラボ環境 許可されたペネトレーションテスト環境 セットアップ例: root@kitploit: git clone cd Project use python follow below Create a virtua...

xspawn

xspawn xspawn は macOS 上で launchd を通じてプログラムを起動し、そのプログラム自体を exec することはありません。目的は、EDR が親としてこのツールや呼び出し元シェルではなく launchd を記録することです。 作者: cenobyte [email protected] 2026 https://github.com/cenobyte-vincit/xspawn 概要 xspawn は xpcpipecreatefromportbootstrapport を開き、launchctl が使用するのと同じ非公開 XPC パイプである...

hassh

"HASSH" - a Profiling Method for SSH Clients and Servers. NOTE: This Corelight repository was created so that it can be actively maintained, as per a request from Salesforce whose original repository is not being maintained. "HASSH" is a network fingerprinting standard which can be used to identi...

Waves Central local privilege escalation via Improper XPC Client Authentication in macOS

RISK EVALUATION Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code...

CVE-2024-43468_mTLS_go

CVE-2024-43468 SCCM SQLインジェクションエクスプロイト（MacOSキーチェーン版mTLSクライアント証明書） macOSキーチェーンを使用してmTLS認証を行うCVE-2024-43468エクスプロイトのGo実装です（キーチェーンからキーをエクスポートする必要はありません）。 さらに: 問題のあるproxychainsを使わずに済むプロキシサポートを追加しました。 証明書のCommon Nameを取得するgetcertname.pyを追加しました（はい、Keychain Access GUIから手動で行うこともできます）。...

CVE-2025-49173

CVE-2025-49173 — macOS 10.9 本地 Root 权限提升（研究） 状态： 非官方 / 研究性质 平台： macOS Mavericks 10.9 影响： 本地权限提升 → Root 严重性： 高（本地） 本仓库包含一个 概念验证（PoC）安全研究项目 ，聚焦于影响 macOS Mavericks 10.9 的 本地 Root 权限提升漏洞 。 此处使用的 CVE 标识符为 非官方，仅用于学术演示目的 。 概述 本研究分析了一种权限提升攻击向量，该向量允许 本地非特权用户 在旧版 macOS 系统中特定的错误配置和授权处理条件下提升权限并获得 Root 级访问权限 ...

memdumper

memdumper memdumper は、別の署名済みバイナリのデバッガー entitlement の下で、実行中の macOS プロセスのメモリを読み取ります。目的は、taskforpid と ptrace をその entitlement を持つバイナリとして実行し、EDR が memdumper ではなくそのバイナリを記録するようにすることです。 by cenobyte [email protected] 2026 https://github.com/cenobyte-vincit/memdumper 概要 memdumper...

Ph-n-t-ch-CVE-2024-40842-XProtectRemediatorDubRobber-Information-Leak-tr-n-macOS

CVE-2024-40842: macOS 上的 XProtectRemediatorDubRobber 信息泄露 概述 CVE-2024-40842 是 macOS XProtect Remediator 中的一个本地信息泄露漏洞，涉及模块： XProtectRemediatorDubRobber 该漏洞源于 Apple 的特权安全进程不安全地处理了环境变量 MAGIC。 机器上运行的恶意应用程序可以利用此行为，诱使 XProtect 读取该应用程序通常无权访问的数据。 Apple 描述了影响： 应用程序可能能够访问用户敏感数据。 Apple 已通过加强环境变量的检查和清理，在 mac...

rinhit

RinHit RinHit - framework de reconocimiento del ecosistema macOS. Recopila artefactos del ecosistema Apple para construir líneas temporales de actividad de red, identidad entre dispositivos y correlación de ubicación física. Este es el módulo de reconocimiento de código abierto. El payload Swift...

Adobe Acrobat < 24.001.30429 / 26.002.21901 Multiple Vulnerabilities (APSB26-141) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 24.001.30429 or 26.002.21901. It is, therefore, affected by multiple vulnerabilities. - Heap-based Buffer Overflow CWE-122 potentially leading to Arbitrary code execution CVE-2026-81992 - Incorrect Authorization...

Adobe Photoshop 26.x < 26.11.7 / 27.x < 27.7 Multiple Vulnerabilities (macOS APSB26-130)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 26.11.7/27.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-130 advisory. - Integer Overflow or Wraparound CWE-190 potentially leading to Arbitrary code execution...

Adobe Reader < 26.002.21901 Multiple Vulnerabilities (APSB26-141) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 26.002.21901. It is, therefore, affected by multiple vulnerabilities. - Heap-based Buffer Overflow CWE-122 potentially leading to Arbitrary code execution CVE-2026-81992 - Incorrect Authorization CWE-863...

netwatch v0.30.0

NetWatch A network monitor for the terminal that helps identify the process behind connections, reads TLS you hold the keys to, and tells you what is wrong and how to fix it. netwatch --view dense. Four boxes, no chrome, every keybind on a border. Download grows up from the axis, upload grows dow...