Collaborate Disseminate
It seems protections are harcoded into sudo that prevent the binary from executing as a low-privileged user. Running it in Ubuntu as a normal user returns the following error:
“sudo must be owned by uid 0 and have the set… Continue reading Unix Privilege Escalation: "sudo must be owned by uid 0 and have the setuid bit set"
I was recently introduced to a variety of detection/hunting tools for MacOS. Listed below are some of the tools I am interested in learning to broaden my toolkit and better learn Mac security.
Google Santa
XNUmon
Little Sni… Continue reading Home environment for MacOS detection tools
I have read several books about hardening the kernel of Mac OS.
I am using Mac OS Mojave.
Based on some repo’s on github and the help of some friend I came up with these kernel parameters below.
What do you think of them, wo… Continue reading Changing kernel parameters of Mac OS Mojave
I tried executing CLI OpenSSL on both MacOS (Sierra) and Linux (Debian) and noticed that the output of the code is different depending on the operating system. I read the version release and it doesn’t seem like there was any… Continue reading OpenSSL On Linux and MacOSX have different outputs
I’m running macOS 10.14, and have encountered a problem which prevents me from enabling FileVault. As best as I can determine, there are no free and convenient alternatives for full disk encryption, which has left me to devis… Continue reading macOS Data Protection without FileVault
it’s strange but I couldn’t find any full instructions how make persistence usb, I’m experiencing problems with creating partitions on my usb stick
https://github.com/rajivkanaujia/alphaworks/wiki/Creating-two-partitions–on… Continue reading How to create persistence Kali Linux usb on Mac OS X
Basically what the title says. I recently had a look at my /var/log/install.log and the earliest entries are from about 2 full months prior to me unboxing the computer.
The packaging had cellophane, no indication it was seco… Continue reading MacBookPro’s OSX install.log has entries that predate the initial unboxing
I was staging an isolated production environment and accessing it’s remote PHP script from my local mac on
http://{mydomain.com}/XbAM7Kt7SJj3M8ytJfEQZbwcBLzg0gNWGfyCHL2b0f0
I saw my click in the log as follows:
{
“id”:”X… Continue reading Freaked out by "impossible click" in logs
Is it possible/feasible to set up a hacking machine that rivals a distribution like Kali Linux on MacOS, or will it never be possible for MacOS to rival a distribution like Kali in terms of hacking tools and functionality fro… Continue reading Security testing alternatives on MacOS
I have a Macbook configured with a firmware password required to boot from any media other than the built-in NVMe drive. In theory, this means without my password you can’t boot from removable media. Is this enough to prevent… Continue reading Is setting a firmware password on a Macbook enough to prevent cold boot attacks?