MacPer
A python based tool that executes various CVEs to gain root privileges as root on various MAC OS platforms. Not all of the exploits directly spawns a root shell some of them executes commands as root and stores results in various locations.
NOTE: This study was inspired by the study of rootos by Aiden Holland (thehappydinoa).
CVE LIST
| Name | CVE | Target OSX Version | Reference |
|---|---|---|---|
| WiFi Velocity LPE | CVE-2021-30655 | 10.16 | https://wojciechregula.blog/post/press-5-keys-and-become-root-aka-cve-2021-30655/ |
| Keysteal LPE | CVE-2019-8526 | 10.14.3 | https://github.com/LinusHenze/Keysteal |
| HideMyAss VPN LPE | - | 10.11 | https://www.securify.nl/advisory/multiple-local-privilege-escalation-vulnerabilities-in-hidemyass-pro-vpn-client-v2x-for-os-x |
| mount_apfs TCC LPE | CVE-2020-9771 | 10.15.3. | https://theevilbit.github.io/posts/cve_2020_9771/ |
| TeamViewer LPE | - | 10.16 | https://theevilbit.github.io/posts/teamviewer_lpe/ |
| Baron Samedit | CVE-2021-3156 | 10.14.6 | https://twitter.com/hackerfantastic/status/1356645638151303169 |
Installation
pip3 install -r requirements.txt
Usage
1 Oct 30, 2021
9 Dec 27, 2022
9 Oct 19, 2022
22.1k Jan 02, 2023
1 Nov 02, 2022
0 Dec 20, 2021
2 Oct 08, 2022
500 Jan 06, 2023
2 Aug 31, 2022
5 Nov 22, 2022
4 Jun 03, 2022
2 Jun 23, 2022
16 Aug 30, 2022
95 Dec 27, 2022
9k Jan 08, 2023
[email protected]">
388 Dec 27, 2022
2 Jan 25, 2022
24 Nov 14, 2022
117 Dec 30, 2022
52 Nov 09, 2022