项目作者: Peterpan0927

项目描述 :
exp on 10.13
高级语言: C
项目地址: git://github.com/Peterpan0927/L1br4.git
创建时间: 2019-02-27T07:45:17Z
项目社区:https://github.com/Peterpan0927/L1br4

开源协议:

下载


Name

why L1br4 ? because it’s the my first time to find vul and use the vul to get root(not just know the vul and write exp), so i decided to use my constellation to name it

Analyse

you can see the analyse from my blog

target

on MacOS 10.13 or 10.13.1

Vul

  1. queryCompletioninAVEBridge
  2. getDisplayPipeCapabilityinAppleIntelFramebufferAzul
  3. ReadRegister32inAppleIntelFramebufferAzul

How to use

  1. make

At last, use the command:

  1. ./pwn

And you will get root~
Having fun with this

exp