CVE-2024-23740 PoC — Kap 安全漏洞

Description

 CVE-2024-23739

介绍

# CVE-2024-23740
 A An issue in Kap through 3.6.0 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings.

 There is a tool designed to automate the process of searching for vulnerabilities in electron: https://github.com/r3ggi/electroniz3r
 


 

 
 With this tool, we can check if the App is Vulnerable:
 
 <img width="841" alt="image" src="https://github.com/V3x0r/-CVE-2024-23739/assets/83291215/90d65788-a315-451f-9e3c-8f758a424e86">
 
 
 After validation, we can inject our code, and get a shell
 
 
 <img width="847" alt="image" src="https://github.com/V3x0r/-CVE-2024-23739/assets/83291215/c74ee68d-ce75-4c02-85b3-b48ae11f06a8">



 Enjoy Your Shell :)

文件快照

备注