/explore
|
You are here 
|
blog.quarkslab.com | ||
| | | | |
www.justus.pw
[AI summary] A technical guide detailing the configuration of borgbackup and borgmatic on macOS for automated backups, logging, and file restoration. |
|
| | | | | ||
| | | | |
cocomelonc.github.io
[AI summary] A practical guide demonstrating macOS malware persistence techniques using LaunchAgents and LoginHooks for educational red teaming purposes, complete with C code examples and automation scripts. |
|
| | | | | ||
| | | | |
bradleyjkemp.dev
LaunchDaemon (or LaunchAgent) Hijacking is a MacOS privilege escalation and persistence technique. It involves abusing insecure file/folder permissions to replace legitimately installed, misconfigured LaunchDaemons with malicious code. I first spotted this issue affecting the OSQuery installer but went looking and found multiple other products with the same problem. This isn't a novel technique (it's briefly mentioned in T1543.004) but I was surprised to find it so rarely talked about. Example - Hijacking the OSQuery LaunchDaemon I've already disclosed this issue to the OSQuery team and they kindly let me use it as an example in this post. |
|
| | | | | ||
| | | | |
www.aymericlamboley.fr
[AI summary] A technical tutorial explains how to bypass limited iOS distribution methods by generating a custom plist file to install an IPA directly from a URL using the itms-services scheme. |
|
| | | |||
