PWN2OWN 2018 - Safari + Root:
Exploit Code released today.
This repo contains exploit code as used by
Ret2 Systems at PWN2OWN 2018. It has been released for educational purposes, detailed by a series of blogposts.
These were used as zero-day exploits against
macOS 10.13.3 & Safari/JSC for PWN2OWN 2018.
They exploited two previously unknown vulnerabilities in Apple software to achieve remote code execution as root through a
single click in the Safari Web Browser.
Contents:
- /jsc - JavaScriptCore Exploit & PoC for CVE-2018-4192
- /windowserver - WindowServer Exploit & PoC for CVE-2018-4193
Repo:
Quote:
|
https://github.com/ret2/P2O_2018
|
Blog Post:
Quote:
|
https://blog.ret2.io/2018/06/05/pwn2own-2018-exploit-development/
|