Sploitus

Exploit for CVE-2022-22639

kitploit · 2026-09-04

Exploit Code

MARKDOWN18 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-JHFTSS-CVE-2022-22639
# Подробности

См. блог:

https://www.trendmicro.com/en_us/research/22/d/macos-suhelper-root-privilege-escalation-vulnerability-a-deep-di.html

# Эксплуатация CVE-2022-22639

  1. Скомпилируйте с помощью команды: `clang exploit.m -o /tmp/exploit -framework Foundation -fobjc-arc -fobjc-link-runtime /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Versions/A/SoftwareUpdate.tbd`
  2. Распакуйте **InstallAssistant.gz** в папку `/tmp`
  3. запустите `/tmp/exploit`



# Демо

https://www.youtube.com/watch?v=-vbkTLHh874