CVE-2020-9934

This repository contains a Swift-based Proof of Concept for CVE-2020-9934, which exploits a vulnerability in macOS's Transparency, Consent, and Control (TCC) framework to bypass privacy protections. The PoC grants itself and Terminal full kTCCService entitlements, allowing unauthorized file operations in TCC-protected directories.

This PoC is a Swift program that exploits CVE-2020-9934 to bypass macOS TCC (Transparency, Consent, and Control) protections by granting itself and Terminal full kTCCService entitlements, enabling unauthorized file operations in TCC-protected directories.

This Metasploit module exploits CVE-2020-9934 by manipulating the TCC daemon on macOS Catalina (<= 10.15.5) to grant unauthorized TCC entitlements. It creates a fake TCC database by setting the HOME environment variable and injecting SQL entries to bypass privacy protections.