├── 1_write_file.py ├── 2_plist_injection.py ├── 3_full_chain.py ├── README.md ├── prl_mod ├── Makefile.kmods ├── prl_tg │ └── Toolgate │ │ ├── Guest │ │ ├── Interfaces │ │ │ └── tgreq.h │ │ └── Linux │ │ │ ├── Interfaces │ │ │ ├── prltg.h │ │ │ └── prltg_call.h │ │ │ └── prl_tg │ │ │ ├── .prltg.o.d │ │ │ ├── .prltg_call.o.d │ │ │ ├── Makefile │ │ │ ├── prltg.c │ │ │ ├── prltg_call.c │ │ │ ├── prltg_common.h │ │ │ ├── prltg_compat.h │ │ │ └── tg_test.c │ │ └── Interfaces │ │ ├── Tg.h │ │ └── VSockPorts.h └── prl_tg_pwn │ └── Toolgate │ ├── Guest │ ├── Interfaces │ │ └── tgreq.h │ └── Linux │ │ ├── Interfaces │ │ ├── prltg.h │ │ └── prltg_call.h │ │ └── prl_tg │ │ ├── Makefile │ │ ├── prltg.c │ │ ├── prltg_common.h │ │ ├── prltg_compat.h │ │ └── tg_test.c │ └── Interfaces │ ├── Tg.h │ └── VSockPorts.h ├── pwn.dylib ├── requirements.txt ├── smile.png └── toolgate ├── __init__.py ├── client.py ├── constants.py └── structs.py /1_write_file.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/1_write_file.py -------------------------------------------------------------------------------- /2_plist_injection.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/2_plist_injection.py -------------------------------------------------------------------------------- /3_full_chain.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/3_full_chain.py -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/README.md -------------------------------------------------------------------------------- /prl_mod/Makefile.kmods: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/Makefile.kmods -------------------------------------------------------------------------------- /prl_mod/prl_tg/Toolgate/Guest/Interfaces/tgreq.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg/Toolgate/Guest/Interfaces/tgreq.h -------------------------------------------------------------------------------- /prl_mod/prl_tg/Toolgate/Guest/Linux/Interfaces/prltg.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg/Toolgate/Guest/Linux/Interfaces/prltg.h -------------------------------------------------------------------------------- /prl_mod/prl_tg/Toolgate/Guest/Linux/Interfaces/prltg_call.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg/Toolgate/Guest/Linux/Interfaces/prltg_call.h -------------------------------------------------------------------------------- /prl_mod/prl_tg/Toolgate/Guest/Linux/prl_tg/.prltg.o.d: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg/Toolgate/Guest/Linux/prl_tg/.prltg.o.d -------------------------------------------------------------------------------- /prl_mod/prl_tg/Toolgate/Guest/Linux/prl_tg/.prltg_call.o.d: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg/Toolgate/Guest/Linux/prl_tg/.prltg_call.o.d -------------------------------------------------------------------------------- /prl_mod/prl_tg/Toolgate/Guest/Linux/prl_tg/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg/Toolgate/Guest/Linux/prl_tg/Makefile -------------------------------------------------------------------------------- /prl_mod/prl_tg/Toolgate/Guest/Linux/prl_tg/prltg.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg/Toolgate/Guest/Linux/prl_tg/prltg.c -------------------------------------------------------------------------------- /prl_mod/prl_tg/Toolgate/Guest/Linux/prl_tg/prltg_call.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg/Toolgate/Guest/Linux/prl_tg/prltg_call.c -------------------------------------------------------------------------------- /prl_mod/prl_tg/Toolgate/Guest/Linux/prl_tg/prltg_common.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg/Toolgate/Guest/Linux/prl_tg/prltg_common.h -------------------------------------------------------------------------------- /prl_mod/prl_tg/Toolgate/Guest/Linux/prl_tg/prltg_compat.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg/Toolgate/Guest/Linux/prl_tg/prltg_compat.h -------------------------------------------------------------------------------- /prl_mod/prl_tg/Toolgate/Guest/Linux/prl_tg/tg_test.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg/Toolgate/Guest/Linux/prl_tg/tg_test.c -------------------------------------------------------------------------------- /prl_mod/prl_tg/Toolgate/Interfaces/Tg.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg/Toolgate/Interfaces/Tg.h -------------------------------------------------------------------------------- /prl_mod/prl_tg/Toolgate/Interfaces/VSockPorts.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg/Toolgate/Interfaces/VSockPorts.h -------------------------------------------------------------------------------- /prl_mod/prl_tg_pwn/Toolgate/Guest/Interfaces/tgreq.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg_pwn/Toolgate/Guest/Interfaces/tgreq.h -------------------------------------------------------------------------------- /prl_mod/prl_tg_pwn/Toolgate/Guest/Linux/Interfaces/prltg.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg_pwn/Toolgate/Guest/Linux/Interfaces/prltg.h -------------------------------------------------------------------------------- /prl_mod/prl_tg_pwn/Toolgate/Guest/Linux/Interfaces/prltg_call.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg_pwn/Toolgate/Guest/Linux/Interfaces/prltg_call.h -------------------------------------------------------------------------------- /prl_mod/prl_tg_pwn/Toolgate/Guest/Linux/prl_tg/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg_pwn/Toolgate/Guest/Linux/prl_tg/Makefile -------------------------------------------------------------------------------- /prl_mod/prl_tg_pwn/Toolgate/Guest/Linux/prl_tg/prltg.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg_pwn/Toolgate/Guest/Linux/prl_tg/prltg.c -------------------------------------------------------------------------------- /prl_mod/prl_tg_pwn/Toolgate/Guest/Linux/prl_tg/prltg_common.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg_pwn/Toolgate/Guest/Linux/prl_tg/prltg_common.h -------------------------------------------------------------------------------- /prl_mod/prl_tg_pwn/Toolgate/Guest/Linux/prl_tg/prltg_compat.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg_pwn/Toolgate/Guest/Linux/prl_tg/prltg_compat.h -------------------------------------------------------------------------------- /prl_mod/prl_tg_pwn/Toolgate/Guest/Linux/prl_tg/tg_test.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg_pwn/Toolgate/Guest/Linux/prl_tg/tg_test.c -------------------------------------------------------------------------------- /prl_mod/prl_tg_pwn/Toolgate/Interfaces/Tg.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg_pwn/Toolgate/Interfaces/Tg.h -------------------------------------------------------------------------------- /prl_mod/prl_tg_pwn/Toolgate/Interfaces/VSockPorts.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/prl_mod/prl_tg_pwn/Toolgate/Interfaces/VSockPorts.h -------------------------------------------------------------------------------- /pwn.dylib: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/pwn.dylib -------------------------------------------------------------------------------- /requirements.txt: -------------------------------------------------------------------------------- 1 | pwntools 2 | pillow -------------------------------------------------------------------------------- /smile.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/smile.png -------------------------------------------------------------------------------- /toolgate/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/toolgate/__init__.py -------------------------------------------------------------------------------- /toolgate/client.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/toolgate/client.py -------------------------------------------------------------------------------- /toolgate/constants.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/toolgate/constants.py -------------------------------------------------------------------------------- /toolgate/structs.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kn32/parallels-plist-escape/HEAD/toolgate/structs.py --------------------------------------------------------------------------------