Privacy Preferences Bypass in Apple Platforms

This repository contains an exploit for CVE-2023-32407, a macOS TCC (Transparency, Consent, and Control) bypass vulnerability. The main exploit logic is implemented in 'lateralus.py', a Python script that orchestrates a race condition to overwrite the TCC.db file, which controls app permissions on macOS. The exploit works by creating symlinks and rapidly swapping directories while launching the Music app, exploiting timing to gain write access to the protected TCC.db file. The script then overwrites this file with attacker-controlled data, potentially granting unauthorized permissions to applications. The exploit also restarts the tccd service to apply changes and demonstrates access by listing the user's Documents directory. The 'misc/resettcc.sh' script is a helper to reset the TCC database and restart the tccd service. The repository is operational and provides a working exploit for local privilege escalation on macOS systems.