ios-malicious-bithunter

iOS恶意位猎手 摘要 iOS恶意位猎手是一个针对iOS应用的恶意插件检测引擎。它能够基于运行时分析注入的dylib动态库的macho文件头部，并通过接口输入特性进行行为分析，以判断动态库特征的行为。该程序不依赖越狱环境，可在AppStore上使用。 新特性 这是一种精确识别iOS恶意代码行为的新方法。基于对App中Mach-O格式的内存中恶意代码运行的分析方法，它可以执行灵活的行为识别以进行分析和持续跟踪。这是一种非常准确的防插件防御方法，包括行为、变量及高度混淆的代码（包括ollvm），在我们的防御过程中取得了非常好的效果。 使用方法 1...

CVE-2024-53407

CVE-2024-53407 Dans Phiewer 4.1.0, une injection de dylib conduit à une exécution de commande, permettant aux attaquants d'injecter un fichier .dylib, ce qui peut entraîner un contrôle à distance et un accès non autorisé à des données utilisateur sensibles sous macOS. Reproduction utilisez le...

CVE-2024-55503

CVE-2024-55503 Injeção de comando no dylib do Termius App para MacOS Descrição Um problema no Termius anterior à v.9.9.0 permite que um atacante local execute código arbitrário através de um script malicioso no componente DYLDINSERTLIBRARIES, usando dylib. root@kitploit:...

CVE-2025-65741

CVE-2025-65741 - Sublime Text 3 عرضة لحقن مكتبة ديناميكية Dylib Injection لنظام macOS root@kitploit: Download: https://www.sublimetext.com/3 CVE: CVE-2025-65741 | https://nvd.nist.gov/vuln/detail/CVE-2025-65741 Author: Vinicius Batistella Version Affected: Sublime Text 3 Build 3208 or prior for...

Swift-Attack

Swift-Attack Test unitari per i blue team per aiutare a costruire rilevamenti per alcuni metodi comuni di post-exploitation su macOS. Ho incluso alcuni esempi di post-exploitation sia utilizzando la cronologia della riga di comando che chiamate API. Gli esempi di post-exploitation inclusi qui non...

CVE-2023-49313

CVE-2023-49313 XMachOViewer 0.04의 dylib 주입 취약점으로 인해 공격자가 무결성을 손상시킬 수 있습니다. 이를 악용하면 제품의 프로세스에 무단 코드가 주입되어 원격 제어 및 민감한 사용자 데이터에 대한 무단 액세스로 이어질 수 있습니다. macOS용 휴대용 버전 먼저 dylib을 작성합니다. root@kitploit: include include attributeconstructor static void pocvoid printf"Malicious Dylib Inserted"; 컴파일합니다. gcc...

macOSTools

macOSTools Strumenti Offensivi per macOS AUnit Progetto XCode di esempio per plugin Audio Unit MigrationToolPayload Plugin dello strumento di migrazione SpecialDelivery Plugin di installazione authplugin Plugin di autenticazione dylibinjection Codice sorgente per l'iniezione dylib. Basato sul...

DylibHijackTest

DylibHijackTest Requisiti Installare i requisiti Python3: pip3 install -r requirements.txt Compilare la dylib dal sorgente perché non ci si fida delle cose compilate prese da GitHub: gcc -dynamiclib DylibHijackTest.c -o DylibHijackTest.dylib Come Funziona ⚠️ Questo genererà molti processi sulla tu...

bfdecrypt

bfdecrypt Dienstprogramm zum Entschlüsseln von App-Store-Apps auf gejailbreakten iOS 11.x App-Store-Apps auf LiberiOS entschlüsseln Hier ist ein Beispiel mit https://github.com/BishopFox/bfinject zum Entschlüsseln der Reddit-App auf einem mit Electra gejailbreakten iPhone: root@kitploit: Cs-iPhon...

bfinject

bfinject Einfache Dylib-Injektion für gejailbreakte 64-Bit-iOS-11.0–11.1.2-Geräte. Kompatibel mit den Electra- und LiberiOS-Jailbreaks. bfinject lädt beliebige Dylibs in laufende App-Store-Apps. Es verfügt über integrierte Unterstützung zum Entschlüsseln von App-Store-Apps und wird mit iSpy und...

PT-2026-47796

1 Local Privilege Escalation via DYLIB Injection CVE-2026-24064 2 Local Privilege Escalation via Insecure XPC Client Validation CVE-2026-24065 Multiple Local Privilege Escalation Vulnerabilities in Waves Audio Waves Central https://t.co/fkys4ePhWy...

PT-2026-47795

Name of the Vulnerable Software and Affected Versions Waves Central for macOS versions 13.0.9 through 16.5.5 Description A trusted XPC client component is signed with hardened runtime entitlements that allow dynamic library injection. A local attacker can use the DYLD INSERT LIBRARIES environment...

CVE-2026-24070

During the installation of the Native Access application, a privileged helper com.native-instruments.NativeAccess.Helper2, which is used by Native Access to trigger functions via XPC communication like copy-file, remove or set-permissions, is deployed as well. The communication with the XPC servi...

CVE-2026-24070

During the installation of the Native Access application, a privileged helper com.native-instruments.NativeAccess.Helper2, which is used by Native Access to trigger functions via XPC communication like copy-file, remove or set-permissions, is deployed as well. The communication with the XPC servi...

CVE-2026-24070 Local Privilege Escalation via DYLIB Injection in Native Instruments Native Access

During the installation of the Native Access application, a privileged helper com.native-instruments.NativeAccess.Helper2, which is used by Native Access to trigger functions via XPC communication like copy-file, remove or set-permissions, is deployed as well. The communication with the XPC servi...

EUVD-2026-5108

During the installation of the Native Access application, a privileged helper com.native-instruments.NativeAccess.Helper2, which is used by Native Access to trigger functions via XPC communication like copy-file, remove or set-permissions, is deployed as well. The communication with the XPC servi...

PT-2026-5657

Name of the Vulnerable Software and Affected Versions Native Instruments Native Access affected versions not specified Description The Native Access application installs a privileged helper, com.native-instruments.NativeAccess.Helper2, used for triggering functions via XPC communication, such as...

CVE-2023-49313

A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data...

CVE-2019-20856

An issue was discovered in Mattermost Desktop App before 4.3.0 on macOS. It allows dylib injection...

CVE-2025-65741

Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection. An attacker could compile a .dylib file and force the execution of this library in the context of the Sublime Text application...