Reproducible macOS automountd research and lab PoCs for CVE-2026-84568 and CVE-2026-84570: fstype path traversal, NFS payload delivery, Gatekeeper behavior, and root code execution.
-
Updated
Oct 10, 2026 - Python
Reproducible macOS automountd research and lab PoCs for CVE-2026-84568 and CVE-2026-84570: fstype path traversal, NFS payload delivery, Gatekeeper behavior, and root code execution.
Red in Pulse post-exploitation tool maintains macOS persistence by leveraging a design weakness in Background Task Management (BTM). It creates a service that blends into the `launchd` lifecycle as a legitimate Apple component, enabling scheduled reconnection after session loss while reducing exposure to signature-based detection.
M365 red-team platform device-code phishing, token harvesting, service-token minting, in-panel data collection and SOCKS5 reverse tunneling
Subdomain chaining auditor under a controlled-subdomain hypothesis: cookie scope, CSP trust, CORS and framing across sibling subdomains, with an interactive browser lab
Per-connection rotating proxy from a routed IPv6 /64 SOCKS5 + HTTP CONNECT with random source binding, single file, zero dependencies
To associate your repository with the redinpulse topic, visit your repo's landing page and select "manage topics."