0xmachos

Persistent Touch ID for sudo

A macOS Sonoma Bonus Feature

Posted on October 1, 2023

Touch ID can be allowed for sudo with a configuration that persists across software updates using /etc/pam.d/sudo_local. [Read More]
Tags:
- Sonoma
- Shell
CYBERWARCON 2021

Posted on November 21, 2021

Last week I, virtually, attended CYBERWARCON 2021. Best conference I've attended recently, lots of high quality, well presented research. Thanks to John Hultquist & Amy for putting together such a wonderful conference. [Read More]
Tags:
- Conference
How $PATH is Constructed on macOS

A quick fix that escalated into a blog post

Posted on May 13, 2021

I ran into some issues with my $PATH the other day while trying to work with Ruby. This prompted me to investigate how $PATH is constructed by Zsh/ macOS. [Read More]
Tags:
- Shell
- Zsh
Pi-hole, Unbound & Tailscale

How to configure a mesh VPN with your own DNS

Posted on May 10, 2021

I recently configured Pi-hole for DNS based ad blocking alongside Unbound for local recursive DNS resolution and then plugged it into Tailscale to enable access from anywhere. This is a quick guide for others and note to myself on how to achieve the same setup. [Read More]
Tags:
- Guide
CVE-2019-8561 Proof of Concept Exploit

Privilege Escalation & SIP Bypass 👀

Posted on April 30, 2021

In June 2019 at Objective by the Sea v2.0 (OBTS), Jaron Bradley dropped CVE-2019-8561. It was patched in macOS 10.14.4. It's still worth writing about though because it is wonderfully simple and gets us r00t as well as a System Integrity Protection (SIP) bypass. [Read More]
Tags:
- Bug
- Proof of Concept
- Exploit
- Mojave
CTF Writeup

Crypto Challenges Writeup

Posted on April 30, 2021

GCHQ's CyberChef tool is used extensively throughout this post. [Read More]
Tags:
- CTF
- Crypto
macOS USB Installer

No Third Party Software Required

Posted on April 4, 2021

You can create a bootable USB to install macOS with one command, without any third party software. [Read More]
Tags:
- TIL
VMware Fusion macOS Research VM

A Living Guide...

Posted on May 24, 2020

If you're at university you can get VMware Fusion free or at a discounted price via OnTheHub [Read More]
Tags:
- VMware
- Guide
Get String Between Two Characters

A simple regex

Posted on April 29, 2020

By default awk splits strings into columns based on whitespace. We can tell awk to use a different input field separator (IFS) via the -F option. [Read More]
Tags:
- Awk
- Regex
- Shell
- TIL
Hello World, TIL!

Posted on April 28, 2020

[Read More]
Tags:
- Admin
- TIL