writeups.xyz / Bad things come in large packages: .pkg signature verification bypass on macOS

Submitter : c2a

Date: 13 January 2023

Bounty : undisclosed

Vulnerabilities :

• Local Privilege Escalation
• GateKeeper Bypass
• SIP Bypass
• MacOS

Programs :

• Apple

Authors :

• Sector 7 (@Sector7_nl)

Link :
https://sector7.computest.nl/post/2023-01-xar/