CVE-2020-15368 vs pwn2own2020

CVE-2020-15368

CVE-2020-15368, aka "How to exploit a vulnerable driver" (by stong)

Source Code

Suggest alternative

Edit details

pwn2own2020

Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities (by sslab-gatech)

pwn2own Safari MacOS Exploit

Source Code

Suggest alternative

Edit details

Our great sponsors

WorkOS - The modern identity platform for B2B SaaS

InfluxDB - Power Real-Time Data Analytics at Scale

SaaSHub - Software Alternatives and Reviews

Our great sponsors

CVE-2020-15368		pwn2own2020
	Project
1	Mentions	1
407	Stars	396
-	Growth	1.8%
0.0	Activity	0.0
about 2 years ago	Latest Commit	about 3 years ago
C++	Language	C++
MIT License	License	-

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

CVE-2020-15368

Posts with mentions or reviews of CVE-2020-15368. We have used some of these posts to build our list of alternatives and similar projects.

How to exploit a vulnerable windows driver
1 project | /r/ReverseEngineering | 29 Jun 2021

pwn2own2020

Posts with mentions or reviews of pwn2own2020. We have used some of these posts to build our list of alternatives and similar projects.

Louis Rossmann on YouTube
1 project | /r/nextfuckinglevel | 26 Jan 2021

Yep, MacOS and iOS have lots of vulnerabilities. I think this is a good time to mention: PSA - if your MacOS is older than 10.15.3 Catalina you are vulnerable to a full WebKit >> kernel privilege (root + kernel) exploit chain which can infect your computer through a website. Keep your devices up to date.

What are some alternatives?

When comparing CVE-2020-15368 and pwn2own2020 you can also consider the following projects:

ds3-nrssr-rce - Documentation and proof of concept code for CVE-2022-24125 and CVE-2022-24126.

GarHal_CSGO - A project that demonstrates how to screw with CSGO from Kernel Space. (CSGO Kernel Cheat/Hack) All cleaned up, and with updated offsets.

Karabiner-Elements - Karabiner-Elements is a powerful utility for keyboard customization on macOS Sierra (10.12) or later.

evil-mhyprot-cli - A PoC for Mhyprot2.sys vulnerable driver that allowing read/write memory in kernel/user via unprivileged user process.

DeauthDetector - Detect deauthentication frames using an ESP8266

NtSymbol - Resolve DOS MZ executable symbols at runtime

Nidhogg - Nidhogg is an all-in-one simple to use rootkit.

herpaderping - Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.