Submitting two new Mac techniques

- Clear Command History
- Gatekeeper Bypass
mac-defense-evasion
Keith McCammon 2017-10-13 14:21:31 -06:00
parent 6966598a1f
commit ee6ed4ea1c
2 changed files with 29 additions and 0 deletions

View File

@ -0,0 +1,20 @@
# Defense Evasion
MITRE ATT&CK Technique: [T1146](https://attack.mitre.org/wiki/Technique/T1146)
## multiple shells
unset HISTFILE
export HISTFILESIZE=0
history -c
## bash
rm ~/.bash_history
cat /dev/null > ~/.bash_history

View File

@ -0,0 +1,9 @@
# Defense Evasion
MITRE ATT&CK Technique: [T1144](https://attack.mitre.org/wiki/Technique/T1144)
sudo xattr -r -d com.apple.quarantine /path/to/MyApp.app
sudo spctl --master-disable