|
You are here |
gist.github.com | ||
| | | | |
bradleyjkemp.dev
|
|
| | | | | LaunchDaemon (or LaunchAgent) Hijacking is a MacOS privilege escalation and persistence technique. It involves abusing insecure file/folder permissions to replace legitimately installed, misconfigured LaunchDaemons with malicious code. I first spotted this issue affecting the OSQuery installer but went looking and found multiple other products with the same problem. This isn't a novel technique (it's briefly mentioned in T1543.004) but I was surprised to find it so rarely talked about. Example - Hijacking the OSQuery LaunchDaemon ?? I've already disclosed this issue to the OSQuery team and they kindly let me use it as an example in this post. | |
| | | | |
janik6n.net
|
|
| | | | | Run a scheduled task on macOS with launchd | |
| | | | |
andybrown.me.uk
|
|
| | | | | I like big, high resolution monitors. The bigger the better. I can't understand how so many young developers and engineers seem to be content to peer into the tiny screens on their Macbooks that of... | |
| | | | |
blog.alexbeals.com
|
|
| | | A developer license for Apple costs $100. Now, if you know that you wish to launch an app, that's pretty cheap to get access to all of the great resources and ability to push as many apps as you want onto the App Store. However, while you're still learning to program in Swift, this can be a large barrier to entry. Luckily, as long as your phone is jailbroken it's pretty easy to get around this requirement. | ||