Skip to content
This repository was archived by the owner on Oct 3, 2023. It is now read-only.

Commit 30e7185

Browse files
authored
Merge pull request #2 from voronaam/master
Add a reference to CVE
2 parents 60c177b + 4a53331 commit 30e7185

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

README.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# KeySteal
2-
KeySteal is a macOS <= 10.14.3 Keychain exploit that allows you to access passwords inside the Keychain without a user prompt.
2+
KeySteal is a macOS <= 10.14.3 Keychain exploit that allows you to access passwords inside the Keychain without a user prompt. The vulnerability has been assigned CVE-2019-8526 number.
33
KeySteal consists of two parts:
44
1. KeySteal Daemon: This is a daemon that exploits securityd to get a session that is allowed to access the Keychain without a password prompt.
55
2. KeySteal Client: This is a library that can be injected into Apps. It will automatically apply a patch that forces the Security Framework to use the session of our keysteal daemon.

0 commit comments

Comments
 (0)