Submitting two new Mac techniques
- Clear Command History - Gatekeeper Bypassmac-defense-evasion
parent
6966598a1f
commit
ee6ed4ea1c
|
@ -0,0 +1,20 @@
|
||||||
|
# Defense Evasion
|
||||||
|
|
||||||
|
MITRE ATT&CK Technique: [T1146](https://attack.mitre.org/wiki/Technique/T1146)
|
||||||
|
|
||||||
|
|
||||||
|
## multiple shells
|
||||||
|
|
||||||
|
unset HISTFILE
|
||||||
|
|
||||||
|
export HISTFILESIZE=0
|
||||||
|
|
||||||
|
history -c
|
||||||
|
|
||||||
|
## bash
|
||||||
|
|
||||||
|
rm ~/.bash_history
|
||||||
|
|
||||||
|
cat /dev/null > ~/.bash_history
|
||||||
|
|
||||||
|
|
|
@ -0,0 +1,9 @@
|
||||||
|
# Defense Evasion
|
||||||
|
|
||||||
|
MITRE ATT&CK Technique: [T1144](https://attack.mitre.org/wiki/Technique/T1144)
|
||||||
|
|
||||||
|
|
||||||
|
sudo xattr -r -d com.apple.quarantine /path/to/MyApp.app
|
||||||
|
|
||||||
|
sudo spctl --master-disable
|
||||||
|
|
Loading…
Reference in New Issue