CVE-2022-22639 PoC — Apple iOS和Apple iPadOS 安全漏洞

Source

https://github.com/jhftss/CVE-2022-22639

Associated Vulnerability

Title:Apple iOS和Apple iPadOS 安全漏洞 (CVE-2022-22639)
Description:A logic issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. An application may be able to gain elevated privileges.

Description

CVE-2022-22639: Get a Root Shell on macOS Monterey

Readme

# Details 
See Blog:

https://www.trendmicro.com/en_us/research/22/d/macos-suhelper-root-privilege-escalation-vulnerability-a-deep-di.html

# Exploitation of CVE-2022-22639
1. Compile with command:
`clang exploit.m -o /tmp/exploit -framework Foundation -fobjc-arc -fobjc-link-runtime /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Versions/A/SoftwareUpdate.tbd`
2. Unzip **InstallAssistant.gz** to `/tmp` folder
3. run `/tmp/exploit`

# Demo
https://www.youtube.com/watch?v=-vbkTLHh874

File Snapshot


 [4.0K]  /data/pocs/7a020a7bd0ce076a6f6fa4fd93bb3d4ebf266b46
├── [1.9K]  exploit.m
├── [ 15M]  InstallAssistant.gz
└── [ 592]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!