CVE-2021-30657

Related Files

macOS Gatekeeper Check Bypass

Posted May 7, 2021

Authored by timwr, Cedric Owens | Site metasploit.com

This Metasploit module serves an OSX app (as a zip) that contains no Info.plist, which bypasses gatekeeper in macOS versions prior to 11.3. If the user visits the site on Safari, the zip file is automatically extracted, and clicking on the downloaded file will automatically launch the payload. If the user visits the site in another browser, the user must click once to unzip the app, and click again in order to execute the payload.

tags | exploit

systems | apple

advisories | CVE-2021-30657

SHA-256 | 63462c2e64d7852458a439220123a2d9aea8f3c2506a1452879ec40fef583f4f

Download | Favorite | View