Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2019-6203-PoC — PoC for CVE-2019-6203, works on < iOS 12.2, macOS < 10.14.4 | Kitploit
Tools/GitHubGitHub/qingxp9/cve-2019-6203-poc
Wi-Fi AuditingVulnerability AnalysisExploitationWireless SecurityPenetration TestingRed Teaming
GitHubqingxp9/cve-2019-6203-poc

CVE-2019-6203-PoC

PoC for CVE-2019-6203, works on < iOS 12.2, macOS < 10.14.4

View Repository
281267 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2019-6203-PoC

There is a PEAP bug in all Apple devices that would allow an attacker to force any Apple device (iOS, macOS or tvOS) to associate with a malicious access point.

This is a PoC for CVE-2019-6203, works on < iOS 12.2, macOS < 10.14.4, tested on Kali Linux.

You need a Wi-Fi card that supports AP mode to run this PoC. You can check this by running iw list, outputs like:

root@kitploit:~
Supported interface modes:
	 * IBSS
	 * managed
	 * AP
	 * AP/VLAN
	 * monitor
	 * mesh point

Usage

root@kitploit:~
apt install hostapd-wpe dnsmasq
git clone https://github.com/qingxp9/CVE-2019-6203-PoC
cd CVE-2019-6203-PoC
python CVE-2019-6203-PoC.py -i wlan0

#with Internet
python CVE-2019-6203-PoC.py -i wlan0 -o eth0

Reference

  • https://sensepost.com/blog/2019/understanding-peap-in-depth/
  • https://www.freebuf.com/vuls/203484.html

video: https://youtu.be/UEzdtkcnrYw

Download Tool