corpus.blog
42,180 blogs · 5,214,511 posts Claim your blog
Record · corpus.blog/posts/01a08c63-f162-70dc-ba2b-36da06839a71

Get root on macOS 12.3.1: proof-of-concepts for Linus Henze’s CoreTrust and DriverKit bugs (CVE-2022-26766, CVE-2022-26763)

Worth Doing Badly | Programming experiments by @zhuowei. · published 2 July 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at worthdoingbadly.com Wayback capture
1blogs citing
First cited
25 Feb 2023
Most recent
25 Feb 2023
Rank this month
not ranked
External links
30
Words captured
2,875

Cited by

Blog
In the post
Date
alfiecg.uk
Getting untethered code execution on iOS 14.8 Read at the source ↗
25 Feb 2023

Links from this post

Link
Host
https://twitter.com/linushenze
twitter.com
https://support.apple.com/en-ca/HT213257
support.apple.com
https://support.apple.com/en-us/HT213258
support.apple.com
https://github.com/zhuowei/CoreTrustDemo/releases/download/v0.1.0/spawn_root
github.com
https://github.com/zhuowei/PCICrash
github.com
https://www.reddit.com/r/jailbreak/comments/vpuppq/free_release_taurinepermanent_relatively/
reddit.com
https://research.dynastic.co/2019/01/31/coretrust-overview
research.dynastic.co
https://github.com/apple-oss-distributions/Security/blob/67353d4e01e66f254b4c9ceb24b959ecf7586e82/trust/headers/SecPolicyPriv.h
github.com
https://twitter.com/Jakeashacks/status/1543257577148006401
twitter.com
https://github.com/apple-oss-distributions/xnu/blob/e7776783b89a353188416a9a346c6cdb4928faad/EXTERNAL_HEADERS/coretrust/CTEvaluate.h
github.com
https://twitter.com/littlelailo/status/1527563427455066113
twitter.com
https://github.com/zhuowei/CoreTrustDemo/blob/main/littlemis.txt
github.com
https://github.com/zhuowei/CoreTrustDemo/blob/main/badcert/makecerts.sh
github.com
https://github.com/zhuowei/CoreTrustDemo/blob/main/badcert/dev_certificate.p12
github.com
https://xkcd.com/1553/
xkcd.com
https://gist.github.com/ChiChou/e3a50f00853b2fbfb1debad46e501121
gist.github.com
https://github.com/LinusHenze/Fugu14/blob/master/Writeup.pdf
github.com
https://github.com/zhuowei/CoreTrustDemo/blob/main/littlect.m
github.com
https://github.com/apple-oss-distributions/IOPCIFamily/blob/0b4c82fe7eaff74091b414225e966f993bfab328/IOPCIDevice.cpp
github.com
https://github.com/apple-oss-distributions/IOPCIFamily/blob/e0cf4edc6b92a166c89a52dea7553666cc0083f7/IOPCIDevice.cpp
github.com
https://en.wikipedia.org/wiki/PCI_configuration_space
en.wikipedia.org
https://github.com/apple-oss-distributions/IOPCIFamily/blob/0b4c82fe7eaff74091b414225e966f993bfab328/PEX8733/PCIDriverKitPEX8733/PCIDriverKitPEX8733.cpp
github.com
https://github.com/vially/ivshmem.dext
github.com
https://github.com/pqrs-org/Karabiner-DriverKit-VirtualHIDDevice/blob/main/DEVELOPMENT.md
github.com
https://developer.apple.com/documentation/driverkit/debugging_and_testing_system_extensions?language=objc
developer.apple.com
https://github.com/AsahiLinux/macvdmtool/blob/0b7f3648ef726617826be9cf0b83b11e4d0e40d4/README.md
github.com
https://stackoverflow.com/a/54296008
stackoverflow.com
https://twitter.com/LinusHenze
twitter.com
https://twitter.com/Fame_G_Monster/status/1528904583581274112
twitter.com
https://twitter.com/littlelailo
twitter.com