Explore >> Select a destination


You are here

theevilbit.github.io
| | her.esy.fun
2.7 parsecs away

Travel
| | [AI summary] The author shares a method to display their Emacs Org mode agenda page on their personal web start page using iframe embedding, shell scripts, and configuration files.
| | bradleyjkemp.dev
1.6 parsecs away

Travel
| | LaunchDaemon (or LaunchAgent) Hijacking is a MacOS privilege escalation and persistence technique. It involves abusing insecure file/folder permissions to replace legitimately installed, misconfigured LaunchDaemons with malicious code. I first spotted this issue affecting the OSQuery installer but went looking and found multiple other products with the same problem. This isn't a novel technique (it's briefly mentioned in T1543.004) but I was surprised to find it so rarely talked about. Example - Hijacking the OSQuery LaunchDaemon ?? I've already disclosed this issue to the OSQuery team and they kindly let me use it as an example in this post.
| | objective-see.org
2.6 parsecs away

Travel
| | [AI summary] This post provides a technical analysis of OSX.DazzleSpy, a cyber-espionage macOS implant used to target pro-democracy users in Hong Kong, detailing its persistence mechanisms, remote capabilities, and detection by Objective-See's tools.
| | nilcoalescing.com
12.0 parsecs away

Travel
| Extend your app's functionality to the entire macOS system by implementing services that users can access from the context menu or the Services menu in other apps.