/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 www.trickster.dev
Decrypting your own HTTPS traffic with Wireshark - Trickster Dev
| | her.esy.fun
Org agenda on your startup page
1.9 parsecs away

Travel
| | [AI summary] The author shares a method to display their Emacs Org mode agenda page on their personal web start page using iframe embedding, shell scripts, and configuration files.
| | www.ahalbert.com
Adding the Weather to the tmux status bar
2.0 parsecs away

Travel
| |
| | bradleyjkemp.dev
LaunchDaemon Hijacking: privilege escalation and persistence via insecure folder permissions | bradleyjkemp
1.6 parsecs away

Travel
| | LaunchDaemon (or LaunchAgent) Hijacking is a MacOS privilege escalation and persistence technique. It involves abusing insecure file/folder permissions to replace legitimately installed, misconfigured LaunchDaemons with malicious code. I first spotted this issue affecting the OSQuery installer but went looking and found multiple other products with the same problem. This isn't a novel technique (it's briefly mentioned in T1543.004) but I was surprised to find it so rarely talked about. Example - Hijacking the OSQuery LaunchDaemon I've already disclosed this issue to the OSQuery team and they kindly let me use it as an example in this post.
| | rick.cogley.info
Run a TFTP Server for Network Device Setups : Rick Cogley Central
11.4 parsecs away

Travel
| If you're working with networking devices such as switches, routers or firewalls, to upgrade their firmware, you more often than not need a TFTP server. Here's how to use the one included with Mac OS X or macOS.