what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Rasmus Sten

Gatekeeper Bypass Proof Of Concept

Posted Oct 4, 2021

Authored by Rasmus Sten | Site labs.f-secure.com

This script will create a zip file exploiting CVE-2021-1810 by creating a directory hierarchy deep enough for Archive Utility to fail setting quarantine attributes on certain files while also making some path names long enough to prevent Safari automating unzipping from unpacking the archive. Finally, the script will create a symbolic link at the top level, making the zip file appear like a normal app bundle zip file.

tags | exploit, bypass

advisories | CVE-2021-1810

SHA-256 | 27f01873128025928ef40392c54869c04de239ae765903eac4c672f993c9065b

Download | Favorite | View