372 matches found
GenEtherExploit
EN GenEtherExploit is a Proof-of-Concept PoC exploit for the macOS vulnerability CVE-2023-40404. This PoC leverages IOKit APIs to interact with the IOUserEthernetResource network service, manipulating the system's network interfaces. The purpose of this exploit is to demonstrate a potential kerne...
CVE-2019-8540
CVE-2019-8540 Kernel Stack info leak at exportObjectToClient function bug details: macOSrelease; return kIOReturnSuccess; We know ioobjectt length is 8 bytes and at 1 which was force convert to machportnamet4 bytes ,so lead to the high 4 bytes not inital...
physmem
physmem physmem is a physical memory inspection tool and local privilege escalation targeting macOS up through 10.12.1. It exploits either CVE-2016-1825 or CVE-2016-7617 depending on the deployment target. These two vulnerabilities are nearly identical, and exploitation can be done exactly the...
xnu
What is XNU? XNU kernel is part of the Darwin operating system for use in macOS and iOS operating systems. XNU is an acronym for X is Not Unix. XNU is a hybrid kernel combining the Mach kernel developed at Carnegie Mellon University with components from FreeBSD and a C++ API for writing drivers...
ida_kernelcache
idakernelcache: An IDA Toolkit for analyzing iOS kernelcaches idakernelcache is an IDAPython module for IDA Pro to make working with iOS kernelcaches easier. The module provides functions to: Convert iOS 12's new static tagged pointers into normal kernel pointers. Parse the kernel's PRELINKINFO...
ghidra_kernelcache
ghidrakernelcache: a Ghidra iOS kernelcache framework for reverse engineering This framework is the end product of my experience in Kernelcache reverse engineering , I usually look for vulnerabilities by manually auditing the kernel and its extensions and have automated most of the things that I...
CVE-2026-43805-analysis
CVE-2026-43805 — IOKit IODMACommand DriverKit RPC race A one-day analysis of the Apple IOKit race condition fixed in iOS/iPadOS 26.6, macOS Tahoe 26.6, Sequoia 15.7.8, Sonoma 14.8.8 and watchOS 26.6. No public proof-of-concept existed when this was written, so the work here is: locate the patched...
CVE-2026-43805
CVE-2026-43805 Analysis IOKit IODMACommand Race Condition Analysis and PoC Summary CVE-2026-43805는 Apple IOKit에서 발생하는 Race Condition 취약점이다. Apple's official advisory states that an app may be able to cause an unexpected system termination or write to kernel memory. The patched version is macOS...
Exploit for Race Condition in Apple Ipados
CVE-2026-43805: IOTimeSyncFamily 패치 Diff 분석 미션 54 · 출제 @FI...
Apple macOS Sequoia 15.7.7 IOKit Race Condition
Apple macOS Sequoia version 15.7.7 IOKit contains a race condition that may allow an app to cause unexpected system termination or write kernel memory. The included proof of concept verifies a TimeSync user-client reachability change associated with the fix...
IOKit DoS
The vulnerability of the IOKit component in operating systems such as macOS, iOS, iPadOS, and watchOS is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
CVE-2026-43805-PoC
CVE-2026-43805: IODMACommand State Race Analysis and PoC This is an analysis that found the missing state lock in Apple IOKit's IODMACommand::PerformOperationImpl through a macOS 26.5/26.6 kernel binary diff. In the vulnerable build, while PerformOperation is using the ready state and memory...
Apple IOKit DriverKit Race Condition
Apple IOKit contains a race condition that may allow an app to cause unexpected system termination or write kernel memory. The supplied analysis includes a sanitizer-checked proof of concept model of the reported DriverKit RPC state-handling flaw...
Exploit for Race Condition in Apple Ipados
CVE-2026-43805 — IOKit IODMACommand DriverKit RPC race A on...
PT-2026-109366
Уязвимость компонента IOKit операционных систем macOS, iOS, iPadOS и watchOS связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...
📄 macOS Sierra 10.12 Build 16A323 Double-Free / Privilege Escalation
macOS Sierra version 10.12 Build 16.A323 local privilege escalation proof of concept exploit. A flaw in the MIG ownership model within the ioserviceaddnotificationool routine of IOKit allows a malicious user to leak Mach port send-right references. By repeatedly invoking notifications with...
📄 macOS 10.13.6 Reference Leak
This is a proof of concept for an older flaw that targets macOS 10.13.6. A flaw in the MIG ownership model within the ioserviceaddnotificationool routine of IOKit allows a malicious user to leak Mach port send-right references. By repeatedly invoking notifications with malformed matching data, MI...
EUVD-2016-8475
Malware in sbrugna...