Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-30657 — A sample POC for CVE-2021-30657 affecting MacOS | Kitploit
Tools/GitHubGitHub/shubham0d/cve-2021-30657
Privilege EscalationPayload GenerationVulnerability AnalysisExploitationMalware Analysis
GitHubshubham0d/cve-2021-30657

CVE-2021-30657

A sample POC for CVE-2021-30657 affecting MacOS

View Repository
2964 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-30657

A simple POC for CVE-2021-30657 affecting MacOS

Vulnerability detail

A vulnerability in syspolicyd allows specially crafted application bundle downloaded from internet to
bypass foundational macOS security features such as File Quarantine, Gatekeeper, and Notarization.
Armed with this capability attackers could hack macOS systems with a simple user (double)-click.

Usage

Put your desireable shell script in payload.sh.
Execute setup.sh
This will generate a bait.dmg that will contain our malicious app bundle.
Share it to the victim through internet.
When victim will double click on app icon after mounting dmg, it will execute the payload script without any gatekeeper's checks.

Affected version

  • macOS Big Sur < 11.3
  • Security Update Catalina < 2021-002

Technical details

https://objective-see.com/blog/blog_0x64.html

Download Tool