/explore
|
You are here |
cocomelonc.github.io | ||
| | | | |
bradleyjkemp.dev
LaunchDaemon (or LaunchAgent) Hijacking is a MacOS privilege escalation and persistence technique. It involves abusing insecure file/folder permissions to replace legitimately installed, misconfigured LaunchDaemons with malicious code. I first spotted this issue affecting the OSQuery installer but went looking and found multiple other products with the same problem. This isn't a novel technique (it's briefly mentioned in T1543.004) but I was surprised to find it so rarely talked about. Example - Hijacking the OSQuery LaunchDaemon I've already disclosed this issue to the OSQuery team and they kindly let me use it as an example in this post. |
|
| | | | | ||
| | | | |
hiltmon.com
[AI summary] The post discusses increasing the file descriptor ulimit on macOS to prevent resource starvation in development environments, providing a script to adjust system limits permanently. |
|
| | | | | ||
| | | | |
blog.florentdelannoy.com
Florent Delannoy's blog |
|
| | | | | ||
| | | | |
tla.systems
Update, 01:36am - this bug was just fixed in iTunes Connect, and PCalc has been submitted correctly. Thanks Apple! Original post: I'm currently trying to submit an update to PCalc for i... |
|
| | | |||