Submitting two new Mac techniques
- Clear Command History - Gatekeeper Bypass
This commit is contained in:
@@ -0,0 +1,20 @@
|
||||
# Defense Evasion
|
||||
|
||||
MITRE ATT&CK Technique: [T1146](https://attack.mitre.org/wiki/Technique/T1146)
|
||||
|
||||
|
||||
## multiple shells
|
||||
|
||||
unset HISTFILE
|
||||
|
||||
export HISTFILESIZE=0
|
||||
|
||||
history -c
|
||||
|
||||
## bash
|
||||
|
||||
rm ~/.bash_history
|
||||
|
||||
cat /dev/null > ~/.bash_history
|
||||
|
||||
|
||||
@@ -0,0 +1,9 @@
|
||||
# Defense Evasion
|
||||
|
||||
MITRE ATT&CK Technique: [T1144](https://attack.mitre.org/wiki/Technique/T1144)
|
||||
|
||||
|
||||
sudo xattr -r -d com.apple.quarantine /path/to/MyApp.app
|
||||
|
||||
sudo spctl --master-disable
|
||||
|
||||
Reference in New Issue
Block a user