CVE-2021-30955 PoC — Apple iOS 和 iPadOS 竞争条件问题漏洞

Source

https://github.com/nickorlow/CVE-2021-30955-POC

Associated Vulnerability

Title:Apple iOS 和 iPadOS 竞争条件问题漏洞 (CVE-2021-30955)
Description:Apple iOS和Apple iPadOS都是美国苹果（Apple）公司的产品。Apple iOS是一套为移动设备所开发的操作系统。Apple iPadOS是一套用于iPad平板电脑的操作系统。 Apple iOS and iPadOS Kernel 存在竞争条件问题漏洞，该漏洞源于恶意的应用程序可以使用内核特权执行任意代码。以下产品及版本受到影响:iPhone 6s及以上、iPad Pro(所有型号)、iPad Air 2及以上、iPad 5及以上、iPad mini 4及以上、iPod touch(

Description

Jake Jame's proof of concept wrapped into an iOS app for  CVE-2021-30955

Readme

# CVE-2021-30955 POC
Proof of concept (wrapped into an iOS app) for  CVE-2021-30955
All credit to Jake James. His POC code (used in this project) can be found [here](https://gist.github.com/jakeajames/37f72c58c775bfbdda3aa9575149a8aa).

### What is this?
This demonstrates CVE-2021-30955, an iOS bug which allows an app in userspace to gain kernel-level permissions. In order to demonstrate this, this POC crashes the kernel of an iOS device.

### Why?
This can (by someone other than me) be turned into an iOS Jailbreak (or something nasty like spyware). This repository was created in order to let people test the POC out on their own iDevices since Jake James only provided a C file.

### Attributions
All credit to Jake James. His POC code (used in this project) can be found [here](https://gist.github.com/jakeajames/37f72c58c775bfbdda3aa9575149a8aa).

File Snapshot


 [4.0K]  /data/pocs/687a0895e8e51ad2af056138d4d503bc6749c5b1
├── [4.0K]  JBPOC.xcodeproj
│   ├── [ 18K]  project.pbxproj
│   ├── [4.0K]  project.xcworkspace
│   │   ├── [ 135]  contents.xcworkspacedata
│   │   └── [4.0K]  xcshareddata
│   │       └── [ 238]  IDEWorkspaceChecks.plist
│   └── [4.0K]  xcuserdata
│       └── [4.0K]  nickorlow.xcuserdatad
│           └── [4.0K]  xcschemes
│               └── [ 461]  xcschememanagement.plist
├── [4.0K]  macOS
│   └── [ 322]  macOS.entitlements
├── [ 857]  README.md
└── [4.0K]  Shared
    ├── [4.0K]  Assets.xcassets
    │   ├── [4.0K]  AccentColor.colorset
    │   │   └── [ 123]  Contents.json
    │   ├── [4.0K]  AppIcon.appiconset
    │   │   └── [2.4K]  Contents.json
    │   └── [  63]  Contents.json
    ├── [ 424]  ContentView.swift
    ├── [ 223]  JBPOCApp.swift
    ├── [ 122]  JBPOC (iOS)-Bridging-Header.h
    ├── [ 104]  JBPOC (macOS)-Bridging-Header.h
    ├── [4.0K]  poc.c
    └── [ 155]  poc.h

11 directories, 15 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!