CVE-2022-22639: Get a Root Shell on macOS Monterey

Overview

Details

See Blog:

https://www.trendmicro.com/en_us/research/22/d/macos-suhelper-root-privilege-escalation-vulnerability-a-deep-di.html

Exploitation of CVE-2022-22639

  1. Compile with command: clang exploit.m -o /tmp/exploit -framework Foundation -fobjc-arc -fobjc-link-runtime /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Versions/A/SoftwareUpdate.tbd
  2. Unzip InstallAssistant.gz to /tmp folder
  3. run /tmp/exploit

Demo

https://www.youtube.com/watch?v=-vbkTLHh874

You might also like...
Get your CPU core and cluster power draw in Watts. Supports Apple Silicon and Intel.

macos-cpupower Get your CPU core and cluster power draw in Watts. What It Does and How It Works This project is designed to get the power draw of your

Get location of user and show near cities and weather of the cities for next 6 days. (iOS)

technical-assignment-Weather-App This project written in Swift by Emre Kılınc You need to have Xcode installed. Please open weather_app.xcworkspace wi

 Nova Wallet iOS - Next get mobile app for Polkadot & Kusama ecosystem
Nova Wallet iOS - Next get mobile app for Polkadot & Kusama ecosystem

Next gen application for Polkadot & Kusama ecosystem, transparent & community-oriented, focused on convenient UX/UI, fast performance & security.

macOS application written in SwiftUI that downloads installer pkgs for the Install macOS Big Sur application.
macOS application written in SwiftUI that downloads installer pkgs for the Install macOS Big Sur application.

Download Full Installer This is a Swift UI implementation of my fetch-installer-pkg script. It will list the full macOS Big Sur (and later) installer

"Podman for macOS" is a macOS frontend for Podman.

Podman for macOS "Podman for macOS" is a macOS frontend for Podman. It can be used to start and stop both the Podman Machine and its running container

SwiftUI MovieDB prototype app built with Xcode 11 Beta & macOS 10.15 Catalina
SwiftUI MovieDB prototype app built with Xcode 11 Beta & macOS 10.15 Catalina

SwiftUI MovieDB iOS 13 App SwiftUI MovieDB prototype app built with Xcode 11 Beta & macOS 10.15 Catalina Requirements macOS 10.15 Catalina Xcode 11 Be

Stock is a MacOS menu bar app that helps you quickly save a web link, a file link, or a text by using drag and drop
Stock is a MacOS menu bar app that helps you quickly save a web link, a file link, or a text by using drag and drop

Stock is a MacOS menu bar app that helps you quickly save a web link, a file link, or a text by using drag and drop

iOS app that detects LaTeX symbols from drawings. Built using PencilKit, SwiftUI, Combine and CoreML for iOS 14 and macOS 11.

DeTeXt Finding the symbol you want to use in LaTeX can be hard since you can't memorize all the possible commands and packages for every symbol you mi

Completed Project for Cross Platform Image Filter SwiftUI macOS & iOS App
Completed Project for Cross Platform Image Filter SwiftUI macOS & iOS App

Completed Project for Cross Platform Image Filter SwiftUI macOS & iOS App Follow the tutorial at alfianlosari.com Features Filter image using predefin

Owner
Mickey
Hello World.
Mickey
A simple - no dependency Swift script that chases your mouse on MacOS (works for Monterey)

tom A simple - no dependency Swift script that chases your mouse on MacOS (works for Monterey) What it does? Keep the display on and move your mouse u

Viet Hung Nguyen 1 Jun 7, 2022
App07 - This is part of the 31 days of small Xcode apps for January 2022

App07 This is part of the 31 days of small Xcode apps for January 2022 Multiplic

Christopher M. 0 Jan 8, 2022
Hack Sprint, Winter 2022, SwiftUI

Hack Sprint - Winter 2022 Welcome to Hack Sprint! The world of mobile development is an amazing and rich one, but one that might seem intimidating at

ACM at UCLA 4 Jan 24, 2022
Brogatchi - RETRO virtual pet sim for cornhacks 2022

Brogatchi When the Tamagotchi was released in 1996, it introduced a generation o

Blake Branvold 2 May 24, 2022
My WWDC 2022 swift student challenge submission - GradientDescend

GradientDescend Welcome to GradientDescend! This is my submission for the WWDC 2022 Swift Student Challenge. If you'd like, you can check out Gradient

Ryan Du 10 Oct 9, 2022
This is the application that describes Equipment Losses & Death Toll & Military Wonded & Prisoner of War of russians in 2022 Ukraine russia War. #StandWithUkraine

This is the application that describes Equipment Losses & Death Toll & Military Wonded & Prisoner of War of russians in 2022 Ukraine russia War. #StandWithUkraine

AndrewShakula 2 Dec 15, 2022
Get notified about available COVID-19 vaccination appointments in Berlin's vaccination centers

VaccinationMonitor If you live in Berlin you might know how difficult it is to find an appointment to get a COVID-19 vaccination. This app notifies yo

Christian Lobach 8 Jan 14, 2022
Get current weather from openWeather APIs.

JCSWeatherKit JCSWeatherKit is a simple weather library for iOS. It can fetch weather data from OpenWeatherMap. More data sources will be supported an

Asa. Ga 0 Oct 26, 2021
Molt is a meditation/relaxation app that helps you get into the right headspace by shedding your stressful thoughts.

A relaxation app where you toss away your stressful thoughts (represented by sticky notes) and pause for a few minutes with a peaceful scene.

Ryan Lintott 4 Mar 30, 2022
IOSWeather - An app that allows people to get weather forecast

iOSWeather iOSWeather is an app that allows people to get weather forecast. App

null 0 Jan 13, 2022