You are here |
blaster.ai | ||
| | | |
janik6n.net
|
|
| | | | Run a scheduled task on macOS with launchd | |
| | | |
bytecellar.com
|
|
| | | | As regular readers are aware, I enjoy spending time logged in to a few personal favorites of the myriad telnet bulletin board systems that are presently online and serving as discussion communities for their users. As often as I can, ... Continue reading ? | |
| | | |
bradleyjkemp.dev
|
|
| | | | LaunchDaemon (or LaunchAgent) Hijacking is a MacOS privilege escalation and persistence technique. It involves abusing insecure file/folder permissions to replace legitimately installed, misconfigured LaunchDaemons with malicious code. I first spotted this issue affecting the OSQuery installer but went looking and found multiple other products with the same problem. This isn't a novel technique (it's briefly mentioned in T1543.004) but I was surprised to find it so rarely talked about. Example - Hijacking the OSQuery LaunchDaemon ?? I've already disclosed this issue to the OSQuery team and they kindly let me use it as an example in this post. | |
| | | |
www.aymericlamboley.fr
|
|
| |