CVE-2020-27950

This repository contains a proof-of-concept exploit for CVE-2020-27950, which leverages a use-after-free vulnerability in the XNU kernel's Mach message handling to leak kernel memory. The exploit demonstrates memory corruption by manipulating kalloc.1024 allocations and reading back leaked port addresses.

This PoC exploits CVE-2020-27950, a WebKit vulnerability, using Metasploit's `webkit_backdrop_filter_blur` module to crash browsers via a crafted webpage. It integrates ngrok for public URL generation to facilitate testing.

The repository contains functional exploit code for CVE-2020-27950, demonstrating a port pointer leak and a simple PoC for a use-after-free vulnerability in the XNU kernel's Mach message handling. The code manipulates kalloc.1024 allocations to leak kernel memory addresses.