A python based tool that executes various CVEs to gain root privileges as root on various MAC OS platforms.

Last update: Nov 30, 2022

Related tags

Overview

MacPer

A python based tool that executes various CVEs to gain root privileges as root on various MAC OS platforms. Not all of the exploits directly spawns a root shell some of them executes commands as root and stores results in various locations.

NOTE: This study was inspired by the study of rootos by Aiden Holland (thehappydinoa).

CVE LIST

Name	CVE	Target OSX Version	Reference
WiFi Velocity LPE	CVE-2021-30655	10.16	https://wojciechregula.blog/post/press-5-keys-and-become-root-aka-cve-2021-30655/
Keysteal LPE	CVE-2019-8526	10.14.3	https://github.com/LinusHenze/Keysteal
HideMyAss VPN LPE	-	10.11	https://www.securify.nl/advisory/multiple-local-privilege-escalation-vulnerabilities-in-hidemyass-pro-vpn-client-v2x-for-os-x
mount_apfs TCC LPE	CVE-2020-9771	10.15.3.	https://theevilbit.github.io/posts/cve_2020_9771/
TeamViewer LPE	-	10.16	https://theevilbit.github.io/posts/teamviewer_lpe/
Baron Samedit	CVE-2021-3156	10.14.6	https://twitter.com/hackerfantastic/status/1356645638151303169

Installation

pip3 install -r requirements.txt

A python based tool that executes various CVEs to gain root privileges as root on various MAC OS platforms.

Related tags

Overview

MacPer

CVE LIST

Installation

Usage

Owner

Growtopia Save.dat Stealer

Confluence Server Webwork OGNL injection

An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.

Fuzz introspector is a tool to help fuzzer developers to get an understanding of their fuzzer’s performance and identify any potential blockers.

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

MayorSec DNS Enumeration Tool

Python script to tamper with pages to test for Log4J Shell vulnerability.

This project is all about building an amazing application that will help users manage their passwords and even generate new passwords for them

Facebook account cloning/hacking advanced tool + dictionary attack added | Facebook automation tool

I hacked my own webcam from a Kali Linux VM in my local network, using Ettercap to do the MiTM ARP poisoning attack, sniffing with Wireshark, and using metasploit

Internationalized Domain Names for Python (IDNA 2008 and UTS #46)

Xteam All in one Instagram,Android,phishing osint and wifi hacking tool available

MVT is a forensic tool to look for signs of infection in smartphone devices

Python implementation of the diceware password generating algorithm.

Web-eyes - OSINT tools for website research

The Linux defender anti-virus software ported to work on CentOS Linux.

Password database With special stuff

CVE-2022-21907 - Windows HTTP协议栈远程代码执行漏洞 CVE-2022-21907

Add a Web Server based on Rogue Mysql Server to allow remote user get

IDAPatternSearch adds a capability of finding functions according to bit-patterns into the well-known IDA Pro disassembler based on Ghidra’s function patterns format.