Explore >> Select a destination
|
You are here 
|
objective-see.com | ||
| | | | |
bradleyjkemp.dev
|
|
| | | | | LaunchDaemon (or LaunchAgent) Hijacking is a MacOS privilege escalation and persistence technique. It involves abusing insecure file/folder permissions to replace legitimately installed, misconfigured LaunchDaemons with malicious code. I first spotted this issue affecting the OSQuery installer but went looking and found multiple other products with the same problem. This isn't a novel technique (it's briefly mentioned in T1543.004) but I was surprised to find it so rarely talked about. Example - Hijacking the OSQuery LaunchDaemon ?? I've already disclosed this issue to the OSQuery team and they kindly let me use it as an example in this post. | |
| | | | |
www.jamf.com
|
|
| | | | | Jamf Threat Labs discovers new pirated macOS applications that establish communication with attacker infrastructure, allowing the victim's computer to be controlled by the attacker. | |
| | | | |
blog.florentdelannoy.com
|
|
| | | | | Florent Delannoy's blog | |
| | | | |
rick.cogley.info
|
|
| | | If you're working with networking devices such as switches, routers or firewalls, to upgrade their firmware, you more often than not need a TFTP server. Here's how to use the one included with Mac OS X or macOS. | ||
