zer0con 2018 - singi

0x00. description

• Target environment

  • macOS 10.12.3 Sierra
  • 8GB Ram

• Used vulnerability

  • CVE-2017-2547 : Safari Code Execution credit to @lokihardt
  • CVE-2017-2540 : WindowServer Memory Leak credit to @fluorescence
  • CVE-2017-2541 : WindowServer Code Execution credit to @fluorescence

• full exploit code will upload soon (will change the shellcode for more simply.)