A python based tool that executes various CVEs to gain root privileges as root on various MAC OS platforms.

Last update: Nov 30, 2022

Related tags

Overview

MacPer

A python based tool that executes various CVEs to gain root privileges as root on various MAC OS platforms. Not all of the exploits directly spawns a root shell some of them executes commands as root and stores results in various locations.

NOTE: This study was inspired by the study of rootos by Aiden Holland (thehappydinoa).

CVE LIST

Name	CVE	Target OSX Version	Reference
WiFi Velocity LPE	CVE-2021-30655	10.16	https://wojciechregula.blog/post/press-5-keys-and-become-root-aka-cve-2021-30655/
Keysteal LPE	CVE-2019-8526	10.14.3	https://github.com/LinusHenze/Keysteal
HideMyAss VPN LPE	-	10.11	https://www.securify.nl/advisory/multiple-local-privilege-escalation-vulnerabilities-in-hidemyass-pro-vpn-client-v2x-for-os-x
mount_apfs TCC LPE	CVE-2020-9771	10.15.3.	https://theevilbit.github.io/posts/cve_2020_9771/
TeamViewer LPE	-	10.16	https://theevilbit.github.io/posts/teamviewer_lpe/
Baron Samedit	CVE-2021-3156	10.14.6	https://twitter.com/hackerfantastic/status/1356645638151303169

Installation

pip3 install -r requirements.txt

A python based tool that executes various CVEs to gain root privileges as root on various MAC OS platforms.

Related tags

Overview

MacPer

CVE LIST

Installation

Usage

Owner

hackinsta: a program to hack instagram

Vulnerability Exploitation Code Collection Repository

BF-Hash - A Python Tool to decrypt hashes by brute force

A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or LFI.

POC for detecting the Log4Shell (Log4J RCE) vulnerability

A Python & JavaScript Obfuscator made in Python 3.

Script Crack Facebook Premium 🚶‍♂

Separation of Mainlobes and Sidelobes in the Ultrasound Image Based on the Spatial Covariance (MIST) and Aperture-Domain Spectrum of Received Signals

Volunteer & Campaign Management System

Webpack自动化信息收集

Malware arcane - Scripts and notes on my malware analysis journey

Apk Framework Detector

Deltaspy - an advanced keylogger that can send keylogs and screenshots to gmail

Js File Scanner This is Js File Scanner

Web-eyes - OSINT tools for website research

Sonoff NSPanel protocol and hacking information. Tasmota Berry driver for NSPanel

Program that mathematically generates and validates CPF numbers

script that pulls cve collections from NVD.NIST.GOV.

You can manage your password with this program.

Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports.