CVE-2024-23740 PoC — Kap 安全漏洞

Source

https://github.com/V3x0r/CVE-2024-23740

Associated Vulnerability

Title:Kap 安全漏洞 (CVE-2024-23740)
Description:An issue in Kap for macOS version 3.6.0 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings.

Description

 CVE-2024-23739

Readme

# CVE-2024-23740
 A An issue in Kap through 3.6.0 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings.

 There is a tool designed to automate the process of searching for vulnerabilities in electron: https://github.com/r3ggi/electroniz3r
 


 

 
 With this tool, we can check if the App is Vulnerable:
 
 <img width="841" alt="image" src="https://github.com/V3x0r/-CVE-2024-23739/assets/83291215/90d65788-a315-451f-9e3c-8f758a424e86">
 
 
 After validation, we can inject our code, and get a shell
 
 
 <img width="847" alt="image" src="https://github.com/V3x0r/-CVE-2024-23739/assets/83291215/c74ee68d-ce75-4c02-85b3-b48ae11f06a8">



 Enjoy Your Shell :)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!