CVE-2016-1828

This is a writeup describing the rootsh exploit, which targets CVE-2016-1758 and CVE-2016-1828 for local privilege escalation on OS X Yosemite 10.10.5. It explains the vulnerabilities and provides context but does not include actual exploit code.

This repository contains a functional local privilege escalation exploit for CVE-2016-1828, targeting OS X Yosemite 10.10.5. It leverages a use-after-free vulnerability in OSUnserializeBinary to achieve kernel code execution via ROP, combined with an info leak (CVE-2016-1758) to bypass KASLR.

The repository contains only a minimal README with a brief description of a local privilege escalation exploit for OS X 10.10.5 via CVE-2016-1828, but no actual exploit code or technical details.

The repository contains only a minimal README with a brief description of CVE-2016-1828 but no actual exploit code or technical details. It lacks functional PoC or analysis.