34791 matches found
kemon
Kemon An Open Source Pre and Post Callback-based Framework for macOS Kernel Monitoring. Breaking News - 08/28/2019 macOS Catalina 10.15 Beta 7 Release Notes https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes Endpoint Security The kauth API has been...
pyre-check
!WARNING This Repository Is Archived This repository is no longer maintained and has been archived. Type checking: Pyre has been replaced by Pyrefly, our next-generation Python typechecker and language server. Security analysis Pysa: Pysa has moved to its own repository at github.com/facebook/Pys...
sinter
Sinter Sinter es un agente de seguridad de endpoints 100% en modo usuario para macOS 10.15 y superior, escrito en Swift. Sinter utiliza la API EndpointSecurity en modo usuario para suscribirse y recibir devoluciones de llamada de autorización del kernel de macOS para un conjunto de tipos de event...
haxx
haxx Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1. Based on CoreTrustDemo, also please note that certificates are not copyrightable. Usage Note: requires macOS + existing jailbreak Get up and running This method works on 14.0-14.6. 14.7 14.7b1-14.8.1 requires launch...
appmon
¡Bienvenido a AppMon! Como se vio en US & EU AppMon es un marco automatizado para monitorizar y alterar las llamadas a la API del sistema de aplicaciones nativas de macOS, iOS y Android. Está basado en Frida. Este proyecto solo fue posible gracias a Ole André Vadla Ravnås y se lo dedico a él...
Pishi
Pishi Pishi is a static binary rewriting tool designed to instrument basic blocks in XNU kernel and in arbitrary macOS kernel extensions kexts. for XNU kernel, Pishi allows you to instrument at a function, file, or folder level. For example, you can instrument everything in the /bsd/net/ director...
osxcollector
Manual de OSXCollector OSXCollector es un conjunto de herramientas de recolección y análisis de evidencia forense para OSX. Recolección Forense El script de recolección se ejecuta en una máquina potencialmente infectada y genera un archivo JSON que describe la máquina objetivo. OSXCollector...
CVE-2022-26726-POC
CVE-2022-26726 Affected Versions As a student, I have limited access to devices in which I can test this vulnerability. The versions I have tested so far are MacOS 12.3.1, MacOS 12.3, MacOS 12.0, MacOS 10.15.7, and MacOS 11.6.1. The vulnerability works on all the versions tested on. So what is th...
chrome-vuln-scanner
Chrome Vulnerability Scanner A lightweight, dependency-free defensive tool that checks the installed Google Chrome version against known vulnerabilities and produces an easy-to-understand visual HTML report. Alat pertahanan ringan untuk memeriksa versi Google Chrome terhadap kerentanan yang...
CVE-2026-0307
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
EUVD-2026-75257
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
CVE-2026-0307
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect app allow a non-administrative local user to escalate to NT AUTHORITY\SYSTEM on Windows or root on macOS and Linux, enabling arbitrary command execution with administrative privileges. The GlobalProtect ap...
CVE-2025-9074
CVE-2025-9074 – Full Docker Escape on Windows & macOS Docker Desktop 📌 Description Docker Desktop exposes the internal Docker Engine API at http://192.168.65.7:2375 to any running container — with no authentication and no access control. Because the engine itself can mount the host filesystem, a...
pwn2own2018
Pwn2Own 2018: Safari + macOS 针对 macOS 10.13.3 的 Safari RCE、沙箱逃逸和内核 LPE。 用法 安装 nasm 和 tornado： root@kitploit: brew install nasm pip3 install tornado 如果你想更改主机或端口，请检查 config.py。然后使用 ./server.py 启动服务器，并导航到显示的 URL。 概述 这个漏洞利用链使用三个不同的漏洞，从 Safari 内运行的 JavaScript 代码逐步实现内核模式代码执行： 1. DFG JIT...
pwn2own2018
Pwn2Own 2018: Safari + macOS Safari RCE, sandbox escape, and LPE to kernel for macOS 10.13.3. Usage Install nasm and tornado: root@kitploit: brew install nasm pip3 install tornado Check config.py if you want to change the host or ports. Afterwards start the server with ./server.py and navigate to...
CVE-2021-30853
CVE-2021-30853 A simple POC script to test for CVE-2021-30657 affecting MacOS. This CVE allows bypass of gatekeeper, notraization and xprotect checks. Vulnerability detail This Vunlerability occurs when you don't define a interpreter or specify a interpreter that itself is a shell script in first...
WebcamViewer
Webcam Viewer Previews the connected webcam as a PoC of CVE-2021-30731. Must be running macOS 11.3.1 or lower or macOS 10.15 before Catalina Security Update 2021-004. Building 1. Install build prerequisites: brew install autoconf automake cmake libtool pkg-config 2. Build dependencies:...
CVE-2026-20698-PF_ROUTE-Heap-Overflow
CVE-2026-20698 — XNU Kernel Heap Overflow via PFROUTE RTAGENMASK Overview Heap buffer overflow in XNU's routing socket PFROUTE when processing RTAGENMASK in routemsg. Triggers kernel panic from an unprivileged process with no entitlements. CVE : CVE-2026-20698 credited to DARKNAVY Affected : iOS...
