CVE-2015-1130

This is a script manipulating a bug in OSX to escalate any user level process to Root privilege.

Python-RootKit-Exploit-OSX This is a script manipulating a bug in OSX to escalate any user level process to Root privilege This is not my exploit, I'm going to be documenting how this exploit works for the benefit of myself and others Timeline Oct 2nd 2014: First discovery Oct 3rd 2014: First contact with Apple Product Security Team Oct 14th 2014: Exploit code shared wi

RootPipe-Demo This is a Proof-of-Concept Mac Application that demonstrates the RootPipe Privilege Escalation Vulnerability (CVE-2015-1130) identified by Emil Kvarnhammar from TrueSec This demo was written in Objective-C, ported from the Python PoC here: RootPipe Usage To use, simply give a path to a file that you want to have escalated permissions, then provide the path where

RootPipe (CVE-2015-1130) and Phoenix (CVE-2015-3673) vulnerability testing utility for Mac OS X 10.2.8 and later

Table of Contents What is RootPipe Tester? Why should I use RootPipe Tester? How do I use RootPipe Tester? PANIC!!! My system is vulnerable? Are we all going to die? OS X 1010 (Yosemite) OS X 109 (Mavericks) OS X 108 (Mountain Lion) OS X 107 (Lion), Mac OS X 106 (Snow Leopard), Mac OS X 105 (Leopard), Mac OS X 104 (Tiger) Mac OS X 103 (Panther) Mac OS X 102 (Jaguar)

RootPipe-Demo This is a Proof-of-Concept Mac Application that demonstrates the RootPipe Privilege Escalation Vulnerability (CVE-2015-1130) identified by Emil Kvarnhammar from TrueSec This demo was written in Objective-C, ported from the Python PoC here: RootPipe Usage To use, simply give a path to a file that you want to have escalated permissions, then provide the path where

Proof of Concept OS X Application for RootPipe Privilege Escalation Vulnerability (CVE-2015-1130)

RootPipe-Demo This is a Proof-of-Concept Mac Application that demonstrates the RootPipe Privilege Escalation Vulnerability (CVE-2015-1130) identified by Emil Kvarnhammar from TrueSec This demo was written in Objective-C, ported from the Python PoC here: RootPipe Usage To use, simply give a path to a file that you want to have escalated permissions, then provide the path where

Simple source code analyzer in Go

Code analyzer A simple code analyzer tool for code repositories The output shows an overall analysis and also per file in a JSON format Dependencies The code has the following dependencies githubcom/gookit/config/json which can be installed with dep ensure Build and run Build the executable go build -o analyzer Modify the configjson f

Fifty Shades of rootpipe

rootpipo Objective-C variant of CVE-2015-1130, aka rootpipe rootpipe works on OS X 109 and OS X < 10103 rootpipe-lagacy works on OS X 107 and 108 rootshell is a handy root shell launcher Usage $ /rootpipe rootshell /tmp/pipo $ /tmp/pipo # id $ /rootpipe-legacy rootshell /tmp/pipo $ /tmp/pipo # id Limitations rootpipe-le

Simple script to help you check for files with execute-as bits set.

SUID Scan SUID Scan is a lightweight script to help you check for files with execute-as bits set (ie the SUID and SGID bits) In general, it is intended for use in distributed environments as a supplement to your routine OS X systems' maintenance cycle Contents Download - get the dmg System Requirements - what you need Contact - how to reach us Uninstall - how to remo