zhuowei / CoreTrustDemo

Proof-of-concept for CVE-2022-26766 on macOS 12.3.1

Demo for Linus Henze's CoreTrust bug (CVE-2022-26766, CoreTrust allows any root certificate)

See https://worthdoingbadly.com/coretrust/ for usage.