rapid7/metasploit-framework — pull request #3882 by jvennix-r7 (2014-09-24 22:46:20+00:00)
Title: Adds osx vmware/bash priv escalation.

Adds a module for getting root on osx+vmware, by abusing the bash bug. Thanks to juken for reporting this in freenode#metasploit!

##### Verification
- [ ] get a user shell session on osx with VMWare Fusion installed
- [ ] run the local exploit module:

msf> use exploit/osx/local/vmware_bash_function_root
msf> set SESSION 1
msf> run

- [ ] You should get a root shell.