5cb3fed680
* Fix string interpolation from ${foo} to #{foo} across all atomics
* remove non-ASCII characters from atomics YAML
* fix erroneous input_arguments
24 lines
442 B
YAML
24 lines
442 B
YAML
---
|
|
attack_technique: T1144
|
|
display_name: Gatekeeper Bypass
|
|
|
|
atomic_tests:
|
|
- name: Gatekeeper Bypass
|
|
description: |
|
|
Gatekeeper Bypass via command line
|
|
|
|
supported_platforms:
|
|
- macos
|
|
|
|
input_arguments:
|
|
app_path:
|
|
description: Path to app to be used
|
|
type: Path
|
|
default: myapp.app
|
|
|
|
executor:
|
|
name: sh
|
|
command: |
|
|
sudo xattr -r -d com.apple.quarantine #{app_path}
|
|
sudo spctl --master-disable
|