0-day Exploit Code used by by Ret2 Systems at PWN2OWN 2018 And Blog Post

[TechLord]

PWN2OWN 2018 - Safari + Root:

Exploit Code released today.

This repo contains exploit code as used by Ret2 Systems at PWN2OWN 2018. It has been released for educational purposes, detailed by a series of blogposts.

These were used as zero-day exploits against macOS 10.13.3 & Safari/JSC for PWN2OWN 2018.

They exploited two previously unknown vulnerabilities in Apple software to achieve remote code execution as root through a single click in the Safari Web Browser.

Contents:

• /jsc - JavaScriptCore Exploit & PoC for CVE-2018-4192
• /windowserver - WindowServer Exploit & PoC for CVE-2018-4193

Repo:

https://github.com/ret2/P2O_2018

Blog Post:

https://blog.ret2.io/2018/06/05/pwn2own-2018-exploit-development/