Michael Haag
17 lines
290 B
YAML
17 lines
290 B
YAML
---
|
|
attack_technique: T1152
|
|
display_name: Launchctl
|
|
|
|
atomic_tests:
|
|
- name: Launchctl
|
|
description: |
|
|
Utilize launchctl
|
|
|
|
supported_platforms:
|
|
- macos
|
|
|
|
executor:
|
|
name: sh
|
|
command: |
|
|
launchctl submit -l evil -- /Applications/Calculator.app/Contents/MacOS/Calculator
|