POC

POC Solo a scopo di ricerca! Una raccolta pubblica di POC & Exploit per le vulnerabilità che ho scoperto. CVE-2022-22583 PackageKit : Un'applicazione potrebbe essere in grado di accedere a file riservati SIP Bypass CVE-2022-26690 PackageKit : Un'applicazione dannosa potrebbe essere in grado di...

CVE-2023-42860

CVE-2023-42860 Exploit für CVE-2023-42860 nur für Forschungszwecke. Dieser Exploit funktioniert für macOS-Versionen vor 13.3, obwohl Apples Änderungsprotokoll angibt, dass er in Version 14.1 behoben wurde. Schritte 1. Laden Sie die Datei InstallAssistant.pkg herunter. 2. Ändern Sie die Variable...

mach_race

Mach Race OS X Lokaler Privilegien-Eskalations-Exploit c fG! 2015, 2016, [email protected] - https://reverse.put.as Ein universeller OS-X-Exploit für SUID, SIP und Binär-Entitlements CVE-2016-1757. Verwendung gegen eine SUID-Binärdatei: ./machraceserver /bin/ps compatmode for i in seq 0...

decrypted

decrypted FairPlay डिक्रिप्टर iPA डंप iOS एप्लिकेशन के लिए जो SIP-सक्षम macOS पर चल रहा है, CVE-2025-24204 का उपयोग करते हुए। macOS 15.0-15.2 का समर्थन करता है। अभी भी विकासाधीन श्रेय CVE-2025-24204 Decryptor...

Exploit for Race Condition in Apple Ipados

macOS LPE CVE-2023-32413 / ZDI-23-845 / Pwn2Own Vancouver 202...

Apple macOS ramrod arbitrary argv[0] execution vulnerability

Talos Vulnerability Report TALOS-2024-2010 Apple macOS ramrod arbitrary argv0 execution vulnerability July 30, 2024 CVE Number CVE-2024-40800 SUMMARY An arbitrary argv0 execution vulnerability exists in the ramrod binary of Apple macOS version 14.5 23F79 x8664. An attacker can inject an arbitrary...

A Technical Analysis of CVE-2022-22583 and CVE-2022-32800

This blog entry discusses the technical details of how we exploited CVE-2022-22583 using a different method. We also tackle the technical details of CVE-2022-32800, another SIP-bypass that we discovered more recently, in this report...

Diving into an Old Exploit Chain and Discovering 3 new SIP-Bypass Vulnerabilities

More than two years ago, a researcher, A2nkF demonstrated the exploit chain from root privilege escalation to SIP-Bypass up to arbitrary kernel extension loading. In this blog entry, we will discuss how we discovered 3 more vulnerabilities from the old exploit chain...

Mac Users Targeted by Spyware Spreading via Xcode Projects

A campaign aimed at Mac users is spreading the XCSSET suite of malware, which has the capability to hijack the Safari web browser and inject various JavaScript payloads that can steal passwords, financial data and personal information, deploy ransomware and more. Infections are propagating via...

Exploit for Improper Input Validation in Apple Mac_Os_X

CVE-2019-8561 Proof of concept exploit for CVE-2019-8561 disc...

macOS 10.11.* / 10.12.* Kernel Code Execution - SIP bypass 0day Exploit

Privilege Escalation Exploit for OS macOS from root to kernel. Usage Info sudo ./exploit This is private exploit. You can buy it at https://0day.today...

Mach Race OSX - Local Privilege Escalation

Mach Race OSX - Local Privilege Escalation Source: https://github.com/gdbinit/machrace Mach Race OS X Local Privilege Escalation Exploit c fG! 2015, 2016, [email protected] - https://reverse.put.as A SUID, SIP, and binary entitlements universal OS X exploit CVE-2016-1757. Usage against a SUID binar...

Apple Mac OS X Zero Day Vulnerability SIP Bypass

System Integrity Protection SIP was implemented in OS X El Capitan and imposes limitations on what actions that Mac computers’ root accounts can take against protected paths of the operating system. Yesterday at the SysCan360 conference in Singapore, a researcher from SentinelOne disclosed detail...