mach_race

Mach Race OS X Local Privilege Escalation Exploit c fG! 2015, 2016, [email protected] - https://reverse.put.as Универсальный эксплойт для OS X, использующий SUID, SIP и двоичные атрибуты CVE-2016-1757. Использование против SUID-бинарника: ./machraceserver /bin/ps compatmode for i in seq 0...

CVE-2023-42860

CVE-2023-42860 CVE-2023-42860 のエクスプロイト（研究目的のみ）。 このエクスプロイトは、macOS 13.3 より前のバージョンで動作します。Apple の変更履歴 ではバージョン 14.1 で修正されたとされていますが。 手順 1. ダウンロード して InstallAssistant.pkg を入手する 2. exploit.sh ファイル内の変数 TARGETFILE を、システム上の SIP で保護されたファイルに変更する（デフォルトのターゲットはシステムの TCC データベースです）。 3. root としてエクスプロイトを実行する：...

POC

POC 연구 목적으로만 사용하세요! 제가 발견한 취약점에 대한 POC & 익스플로잇 공개 모음집입니다. CVE-2022-22583 PackageKit : 애플리케이션이 제한된 파일에 접근할 수 있음 SIP 우회 CVE-2022-26690 PackageKit : 악성 애플리케이션이 파일 시스템의 보호된 부분을 수정할 수 있음 SIP 우회 CVE-2022-32800 PackageKit : 앱이 파일 시스템의 보호된 부분을 수정할 수 있음 SIP 우회 CVE-2022-26728 SoftwareUpdate : 악성 애플리케이션이 제한...

decrypted

Расшифровка Дешифратор FairPlay дамп iPA для приложений iOS, работающих на macOS с включённым SIP, использующий CVE-2025-24204. Поддерживает macOS 15.0-15.2 В РАЗРАБОТКЕ Благодарности CVE-2025-24204 Decryptor...

Exploit for Race Condition in Apple Ipados

macOS LPE CVE-2023-32413 / ZDI-23-845 / Pwn2Own Vancouver 202...

Apple macOS ramrod arbitrary argv[0] execution vulnerability

Talos Vulnerability Report TALOS-2024-2010 Apple macOS ramrod arbitrary argv0 execution vulnerability July 30, 2024 CVE Number CVE-2024-40800 SUMMARY An arbitrary argv0 execution vulnerability exists in the ramrod binary of Apple macOS version 14.5 23F79 x8664. An attacker can inject an arbitrary...

A Technical Analysis of CVE-2022-22583 and CVE-2022-32800

This blog entry discusses the technical details of how we exploited CVE-2022-22583 using a different method. We also tackle the technical details of CVE-2022-32800, another SIP-bypass that we discovered more recently, in this report...

Diving into an Old Exploit Chain and Discovering 3 new SIP-Bypass Vulnerabilities

More than two years ago, a researcher, A2nkF demonstrated the exploit chain from root privilege escalation to SIP-Bypass up to arbitrary kernel extension loading. In this blog entry, we will discuss how we discovered 3 more vulnerabilities from the old exploit chain...

Mac Users Targeted by Spyware Spreading via Xcode Projects

A campaign aimed at Mac users is spreading the XCSSET suite of malware, which has the capability to hijack the Safari web browser and inject various JavaScript payloads that can steal passwords, financial data and personal information, deploy ransomware and more. Infections are propagating via...

Exploit for Improper Input Validation in Apple Mac_Os_X

CVE-2019-8561 Proof of concept exploit for CVE-2019-8561 disc...

macOS 10.11.* / 10.12.* Kernel Code Execution - SIP bypass 0day Exploit

Privilege Escalation Exploit for OS macOS from root to kernel. Usage Info sudo ./exploit This is private exploit. You can buy it at https://0day.today...

Mach Race OSX - Local Privilege Escalation

Mach Race OSX - Local Privilege Escalation Source: https://github.com/gdbinit/machrace Mach Race OS X Local Privilege Escalation Exploit c fG! 2015, 2016, [email protected] - https://reverse.put.as A SUID, SIP, and binary entitlements universal OS X exploit CVE-2016-1757. Usage against a SUID binar...

Apple Mac OS X Zero Day Vulnerability SIP Bypass

System Integrity Protection SIP was implemented in OS X El Capitan and imposes limitations on what actions that Mac computers’ root accounts can take against protected paths of the operating system. Yesterday at the SysCan360 conference in Singapore, a researcher from SentinelOne disclosed detail...