Collaborate Disseminate
If the exploited victim OS is Windows, metasploit has the getgui command to run RDP. Then he can manipulate the victim OS through the GUI desktop interface.
meterpreter > run getgui -u loneferret -p password
https://www… Continue reading Metasploit MacOS victim – tools to enable remote desktop / GUI view of the victim
So I recently upgraded an old MB Pro to Mojave because I was concerned I could’ve infected it.
Now I’m probably overreacting to all of this but since I was using all of my USB sticks in the previous version, lets say the mal… Continue reading How can I safely use potentially infected USB sticks from a previous OS installation?
I was reviewing a Mac Os X machine (a late 2016 MacBook Pro) and I found some weird scripts in the LaunchAgent folder.
8 -rw-r–r– 1 XX wheel 500 30 Lug 07:18 com.1e1zq.plist
8 -rw-r–r– 1 XX staff 386 30 Lug 07:18… Continue reading Weird Python script found on a Mac Os X client machine
I’m the only user on my personal laptop (MacBook Pro) running macOS Sierra. I discovered today that a suspicious user with a Chinese name appeared next to mine in the finder. Please see the attached picture below:
I googl… Continue reading New user with Chinese name appeared on MacOS. Hacker?
This question already has an answer here:
What are the security implications of homebrew and macports?
1 answer
I read (h… Continue reading How Homebrew may impact your Mac’s security [duplicate]
What kinds of Man In The Middle (MITM) attacks is a macbook pro running a fully updated incarnation of El Capitan OS-x vulnerable to? To give some context the system is
early 2015 model Macbook pro
El Capitan 10.11 fully u… Continue reading El Capitan based Macbook Compromised [on hold]
In High Sierra or Mojave, is it possible to harden our login password so that the hash is more difficult to crack? I’m not a crypto person, but can we increase the iterations, transforms, hashing algo strenth or something… … Continue reading How to harden user/login password? [migrated]
I’m trying to convert my .plist into a hash.
sudo defaults read /var/db/dslocal/nodes/Default/users/username.plist ShadowHashData|tr -dc 0-9a-f|xxd -r -p|plutil -convert xml1 – -o –
How can I convert the below output into … Continue reading How to convert plutil output to hash?
I give employees AES wireless keyboards.
I would like to enforce the OS to only recognise the keyboard we supply.
Is that possible?
Assuming my employees OS are Windows 10, Ubuntu, Mac OSX.
How could it be done?
I wasn’t abl… Continue reading How to enforce on the OS level to recognise only certain keyboards
According to this post, Chrome passwords are stored in /Users/$USER/Library/Application Support/Google/Chrome/Default/databases/Databases.db. Is it possible for an attacker to copy Chrome passwords found in Databases.db and v… Continue reading Is it possible to open Chrome’s databases.db in another MacBook?