+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Computing (https://hackforums.net/forumdisplay.php?fid=88)
+---- Forum: MacOS (https://hackforums.net/forumdisplay.php?fid=159)
+---- Thread: [TUT] Mac OS X 10.9.5 Root Exploit [TUT] (/showthread.php?tid=5037348)
Pages: Pages
1
2
[TUT] Mac OS X 10.9.5 Root Exploit [TUT] - hаckеr - Oct 27, 2015
Hi guys, today I am going to show you how spawn a root shell on OS X Mavericks 10.9.5, in which you can run any command with root privileges 🤗
What You Will Need:
Mac running OS X Mavericks 10.9.5
Access to Terminal
NOTE: If you do not have these you will not be able to get root
Step One
Download my script from here and save it to your Desktop as exploit.py (or whatever you want the filename to be).
NOTE: Must be saved as a python script!!
Step Two
Open Terminal and type cd Desktop. Then type
or whatever you named the file.
Step Three
Let my script execute, it may take up to a minute or two. Once completed you will get something like this. You now have a root shell in which you can execute root commands!
Spoiler (Click to View)
What Can I Do With This?
1.) Steal the passwords of any account on your computer!
Download my keychaindumper.sh script and run it! Download by clicking here
2.) Make any normal user account an admin account Click spoiler for code. Spoiler (Click to View)
3.) Anything you want 👍
Hope you enjoyed my tutorial! Post your thoughts!
Mac running OS X Mavericks 10.9.5
Access to Terminal
NOTE: If you do not have these you will not be able to get root
Step One
Download my script from here and save it to your Desktop as exploit.py (or whatever you want the filename to be).
NOTE: Must be saved as a python script!!
Step Two
Open Terminal and type cd Desktop. Then type
Code
python exploit.pyor whatever you named the file.
Step Three
Let my script execute, it may take up to a minute or two. Once completed you will get something like this. You now have a root shell in which you can execute root commands!
Spoiler (Click to View)
![[Image: iGAfGmj.png]](https://i.imgur.com/iGAfGmj.png)
What Can I Do With This?
1.) Steal the passwords of any account on your computer!
Download my keychaindumper.sh script and run it! Download by clicking here
2.) Make any normal user account an admin account Click spoiler for code. Spoiler (Click to View)
3.) Anything you want 👍
Hope you enjoyed my tutorial! Post your thoughts!
* - NyQuil - Oct 27, 2015
cool will check it out in a bit, least its not another tutorial on how to exploit something without using metasploit.
* - DrakkarLevi - Oct 27, 2015
Does this work only on 10.9.5? I have 10.11.1 El Capitan ;(
* - hаckеr - Oct 27, 2015
It only works on 10.9.5 I think. I haven't tried it on anything else
* - DrakkarLevi - Oct 27, 2015
Dang. Well, I have a quick question either way.
Someone ssh'd into a server on this Mac, but I guess the password wasn't saved (when you ssh into servers, typing in the password is invisible). Would this exploit allow me to obtain this password?
* - hаckеr - Oct 27, 2015
Probably not, but if you were running 10.9.5 you could get admin privileges and install a keylogger.
* - SWCR - Oct 28, 2015
Someone try it on 10.11.1?
* - hаckеr - Oct 28, 2015
Got you guys something :D
https://github.com/kpwn/tpwn
Works for 10.11.5>
* - SOSA_ - Oct 29, 2015
(Oct 27, 2015 11:02 PM)awric Wrote: Dang. Well, I have a quick question either way.
Someone ssh'd into a server on this Mac, but I guess the password wasn't saved (when you ssh into servers, typing in the password is invisible). Would this exploit allow me to obtain this password?
Assuming that the keypairs are stored on that computer and the password is in the keychain, yes. But you need a separate keychain stealer
OP, did you write this yourself?
* - hаckеr - Oct 29, 2015
Write what exactly? haha there's like 4 different codes included :D
* - SOSA_ - Oct 30, 2015
(Oct 29, 2015 07:29 PM)greyhatphantom Wrote: Write what exactly? haha there's like 4 different codes included :D
The main exploit script
* - hаckеr - Oct 30, 2015
Found part of a script then modified :D
Did it work for you? The script was pretty complicated, so I shortened it up and made it user friendly :D
* - Tr0janVirus - Oct 31, 2015
Will this work for el capitan?
* - WiiSport - Oct 31, 2015
Really nice OP! Will try this on my old iMac. Needed this for a long time a time ago. Still going to do the idea because of your thread. Thanks :)
Kind and regards,
- WiiSport
* - ★ Eugtique ★ - Oct 31, 2015
I'll need to try :o haha thanks ^^