Submitting two new Mac techniques
- Clear Command History - Gatekeeper Bypassmac-defense-evasion
parent
6966598a1f
commit
ee6ed4ea1c
|
@ -0,0 +1,20 @@
|
|||
# Defense Evasion
|
||||
|
||||
MITRE ATT&CK Technique: [T1146](https://attack.mitre.org/wiki/Technique/T1146)
|
||||
|
||||
|
||||
## multiple shells
|
||||
|
||||
unset HISTFILE
|
||||
|
||||
export HISTFILESIZE=0
|
||||
|
||||
history -c
|
||||
|
||||
## bash
|
||||
|
||||
rm ~/.bash_history
|
||||
|
||||
cat /dev/null > ~/.bash_history
|
||||
|
||||
|
|
@ -0,0 +1,9 @@
|
|||
# Defense Evasion
|
||||
|
||||
MITRE ATT&CK Technique: [T1144](https://attack.mitre.org/wiki/Technique/T1144)
|
||||
|
||||
|
||||
sudo xattr -r -d com.apple.quarantine /path/to/MyApp.app
|
||||
|
||||
sudo spctl --master-disable
|
||||
|
Loading…
Reference in New Issue