Skip to content

Instantly share code, notes, and snippets.

View neonmodder123's full-sized avatar

neon neonmodder123

View GitHub Profile
@rooootdev
rooootdev / dotdot.m
Last active August 21, 2026 12:25
CVE-2026-43723. Technically an arbitrary root file write primitive, however, the cleanup path in MediaRemote deletes the file ca. 50ms after the write, so it effectively becomes an arbitrary root file deletion primitive.
//
// dotdot.m
// dotdot
//
// Created by roooot on 03.08.26.
// Copyright (C) 2026 roooot
//
// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU Affero General Public License as published
// by the Free Software Foundation, either version 3 of the License, or