CVE-2015-1130

This Metasploit module exploits CVE-2015-1130, a privilege escalation vulnerability in Mac OS X's Admin framework (dubbed 'Rootpipe'). It leverages a hidden backdoor API to escalate from an admin user to root by executing a Python-based exploit and a reverse shell payload.

This exploit leverages the rootpipe vulnerability (CVE-2015-1130) to escalate privileges on macOS by abusing the Admin or SystemAdministration framework to create a file with root permissions. It works by authenticating with a nil authorization reference and then writing a binary to a specified destination path with elevated permissions.

This repository contains a README file describing RootPipe Tester, a tool to test for CVE-2015-1130 and CVE-2015-3673 vulnerabilities on macOS. It provides detailed instructions and mitigation steps for various macOS versions.

This is a Proof-of-Concept Mac Application demonstrating the RootPipe Privilege Escalation Vulnerability (CVE-2015-1130). It allows escalating file permissions by copying a file to a specified path with elevated permissions and optional owner/group settings.

This Metasploit module exploits CVE-2015-1130, a hidden backdoor API in Apple's Admin framework on Mac OS X, to escalate privileges from an admin user to root. It writes a Python exploit and a binary payload to a writable directory, then executes them to achieve privilege escalation.