lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 15.9.1 Refer to lunar.sh and changelog for more up to date version information License CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code in audit...

perl-CVE-2013-1775

CVE-2013-1775 Apple Mac OSX 10.8.4 - 권한 상승 CVE-2013-1775 Apple Mac OSX 10.8.4 - 권한 상승 익스플로잇의 Perl 버전입니다. 참고 자료: https://www.exploit-db.com/exploits/27965/ https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/sudopasswordbypass.rb...

chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

Disk-Arbitrator

はじめに Disk Arbitrator は、ディスクデバイスのイメージング中に正しいフォレンジック手順が守られていることを確認するために設計された Mac OS X フォレンジックユーティリティです。Disk Arbitrator は基本的に、Disk Arbitration フレームワークへのユーザーインターフェースであり、このフレームワークにより、プログラムはファイルシステムの自動マウントを含むブロックストレージデバイスの管理に参加できます。有効にすると、Disk Arbitrator...

phpsploit

Full-featured C2 framework which silently persists on webserver via polymorphic PHP oneliner...

RootPipe-Demo

RootPipe-Demo 이는 Emil Kvarnhammar가 TrueSec에서 식별한 RootPipe 권한 상승 취약점CVE-2015-1130을 시연하는 개념 증명 Mac 애플리케이션입니다. 이 데모는 Objective-C로 작성되었으며, 다음의 Python PoC를 포팅한 것입니다: RootPipe 사용법 사용하려면 권한을 상승시키려는 파일의 경로를 지정하고, 권한이 상승된 파일을 복사할 대상 경로를 입력한 다음, 권한을 8진수 형식예: 04777으로 제공하고, 선택적으로 파일 소유자 이름과 그룹을 제공하면 됩니다. OS ...

wafpass

WAFPASS root@kitploit: ██╗ ██╗ █████╗ ███████╗██████╗ █████╗ ███████╗███████╗ ██║ ██║██╔══██╗██╔════╝██╔══██╗██╔══██╗██╔════╝██╔════╝ ██║ █╗ ██║███████║█████╗ ██████╔╝███████║███████╗███████╗ ██║███╗██║██╔══██║██╔══╝ ██╔═══╝ ██╔══██║╚════██║╚════██║ ╚███╔███╔╝██║ ██║██║ ██║ ██║ ██║███████║███████...

zizzania

zizzania zizzania sniffs wireless traffic listening for WPA handshakes and dumping only those frames suitable to be decrypted one beacon + EAPOL frames + data. In order to speed up the process, zizzania sends IEEE 802.11 DeAuth frames to the stations whose handshake is needed, properly handling...

RootPipeTester

目次 1. RootPipe Testerとは何か？ 2. なぜRootPipe Testerを使うべきか？ 3. RootPipe Testerはどう使うのか？ 4. パニック!!! 私のシステムは脆弱なの？ 私たちはみんな死ぬの？ 1. OS X 10.10 Yosemite 2. OS X 10.9 Mavericks 3. OS X 10.8 Mountain Lion 4. OS X 10.7 Lion, Mac OS X 10.6 Snow Leopard, Mac OS X 10.5 Leopard, Mac OS X 10.4 Tiger 5. Mac OS X 10.3...

OSXAuditor

OS X Auditor OS X Auditor는 무료 Mac OS X 컴퓨터 포렌식 도구입니다. OS X Auditor는 실행 중인 시스템 또는 분석하려는 시스템의 사본에서 다음 아티팩트를 파싱하고 해싱합니다: 커널 확장 시스템 에이전트 및 데몬 타사 에이전트 및 데몬 오래되고 더 이상 사용되지 않는 시스템 및 타사 시작 항목 사용자 에이전트 사용자의 다운로드된 파일 설치된 애플리케이션 다음을 추출합니다: 사용자의 격리된 파일 사용자의 Safari 기록, 다운로드, 상위 사이트, LastSession, HTML5 데이터베이스 ...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

KisMac2

참고: 이 프로젝트는 더 이상 유지 관리되지 않습니다 KisMac2 KisMAC은 Mac OS X용 무료 오픈 소스 무선 스니핑 및 보안 도구입니다. 이슈 추적: 앞으로는 GitHub의 여기 GitHub에서에 있는 트래커를 사용해 주십시오. 원본 KisMac의 Trac은 http://trac.kismac-ng.org에 있습니다...

blackboxprotobuf

Blackbox Protobuf Blackbox Protobuf now has an official package on PyPi under the namebbpb. The blackboxprotobuf package is an older fork Description Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers protobuf without the matching protobuf definition. Protobuf is a bina...

test_struts2_vulnerability_CVE-2017-5638

teststruts2vulnerabilityCVE-2017-5638inMACOSX Mac OS X 上で Struts2 の脆弱性 CVE-2017-5638 をテストする テスト用 Web アプリをダウンロードして Tomcat で実行する root@kitploit: install tomcat brew install tomcat confirm where the tomcat installed ls -lF which catalina confirm tomcat home dir ls -lF...

Wireshark 2.0.x < 2.0.13 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.0.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.0.13 advisory. - In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the RGMP dissector could crash. This was addressed i...

ruby: memory corruption in BigDecimal on 64bit platforms

The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service applicati...

ruby: memory corruption in BigDecimal on 64bit platforms

The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service applicati...

Apple Xcode security vulnerabilities

Apple Xcode is an integrated development environment provided by the American company Apple for developers. It is primarily used for developing applications for Mac OS X and iOS platforms. Versions of Apple Xcode prior to 16.3 contained security vulnerabilities due to permission issues, which cou...

Mozilla Firefox ESR Security Update (mfsa_2026-03) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox ESR Security Update (mfsa_2026-02) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...