Skip to main content

Skills in diesem Repository

abelrguezr/hacktricks-skills - Seite 9

SkillsMP hat 908 Skills aus abelrguezr/hacktricks-skills gesammelt. Öffne einen Skill, um Quelle und Details zu prüfen.

abelrguezr/hacktricks-skills

Es werden 40 von 908 gesammelten Skills angezeigt.

Beruf
Informationssicherheitsanalysten
Beschreibung

macOS security analysis and credential extraction. Use this skill whenever the user needs to extract passwords, dump keychains, analyze user databases, or gather security artifacts from macOS systems. Trigger for tasks involving shadow passwords, keychain…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Analyze macOS Mach-O binaries, universal binaries, and extract security-relevant information. Use this skill whenever the user asks about macOS binary analysis, Mach-O format, universal binaries, reverse engineering macOS executables, extracting binary…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Analyze Grand Central Dispatch (GCD) usage in macOS/iOS applications for security research and reverse engineering. Use this skill whenever the user needs to understand GCD queues, blocks, or parallelism in Objective-C/Swift code, hook GCD functions with…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

macOS privilege escalation techniques and triage. Use this skill whenever the user mentions macOS privilege escalation, privesc, gaining root, escalating privileges on macOS, TCC bypass, LaunchDaemon abuse, XPC vulnerabilities, or any macOS security research…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Security testing skill for Chromium browser abuse on macOS. Use this skill when the user needs to test browser-based privilege escalation, session theft, or DevTools Protocol exploitation on macOS systems. Trigger this skill for any request involving…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Analyze macOS app bundles for Dirty NIB attack surface, enumerate nib-driven apps, validate code signatures, and assess defensive posture. Use this skill whenever the user mentions macOS security research, app bundle auditing, privilege escalation analysis,…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

macOS Electron application security testing and privilege escalation. Use this skill whenever the user mentions Electron apps, macOS security testing, privilege escalation on macOS, Electron fuses, code injection in desktop apps, or any Electron-based…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

macOS function hooking and method swizzling for security research. Use this skill whenever you need to intercept function calls, hook Objective-C methods, analyze binary behavior, or understand macOS runtime manipulation. Trigger this for any task involving…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Analyze macOS Mach IPC communications, port rights, task ports, and inter-process communication mechanisms. Use this skill whenever the user needs to understand Mach ports, debug IPC messages, analyze port permissions, work with task/thread ports, investigate…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Analyze Mach Interface Generator (MIG) IPC on macOS. Use this skill whenever the user mentions MIG, Mach IPC, macOS inter-process communication, binary analysis of Mach-O files with IPC, extracting dispatch tables from macOS binaries, or reverse engineering…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

macOS thread injection and IPC exploitation reference. Use this skill whenever the user asks about macOS security research, privilege escalation, task ports, thread hijacking, Mach IPC, process injection, EndpointSecurity detection, or Apple Silicon (arm64e)…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

macOS XPC Authorization Analysis and Exploitation. Use this skill whenever investigating macOS privilege escalation, analyzing XPC helper tools, enumerating authorization rights in /var/db/auth.db, or developing exploits for vulnerable XPC services. Trigger…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Audit macOS XPC services for PID reuse vulnerabilities. Use this skill whenever you need to analyze XPC connection code, review process authentication patterns, identify race condition risks in macOS IPC, or harden XPC services against PID-based…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

macOS XPC security verification and connection hardening. Use this skill whenever you're implementing XPC services, reviewing XPC connection code, auditing macOS IPC security, or need to understand XPC authentication vulnerabilities. Trigger this for any XPC…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

macOS XPC audit token spoofing vulnerability research and exploitation. Use this skill whenever the user mentions XPC, audit tokens, macOS privilege escalation, IPC vulnerabilities, Mach ports, xpc_connection_get_audit_token, or any macOS inter-process…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Analyze macOS XPC (XNU inter-Process Communication) services for security research, privilege escalation assessment, and vulnerability discovery. Use this skill whenever the user needs to enumerate XPC services, analyze XPC plist configurations, understand…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

macOS Java application security testing and exploitation. Use this skill whenever the user mentions Java applications on macOS, _JAVA_OPTIONS, vmoptions files, Java agents, or wants to test for privilege escalation through Java apps. This includes finding…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

macOS dynamic library injection and dyld hijacking for security testing. Use this skill when analyzing macOS binaries for privilege escalation, checking for disabled library validation, exploiting @rpath vulnerabilities, or performing DYLD_INSERT_LIBRARIES…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Analyze macOS dynamic linker (dyld) internals, debug library loading, examine Mach-O binary structure, and identify potential security implications. Use this skill whenever the user needs to understand how macOS loads executables, debug dyld behavior, analyze…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

macOS library injection and dylib hijacking analysis. Use this skill whenever the user needs to analyze macOS binaries for library injection vulnerabilities, check DYLD_INSERT_LIBRARIES restrictions, find weak linked libraries, examine rpath configurations,…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

How to inject code into .NET applications on macOS using the debugging protocol. Use this skill whenever the user mentions .NET debugging, macOS injection, named pipes, DFT exploitation, or wants to interact with .NET Core processes on macOS. This skill…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

macOS Perl security testing and hardening. Use this skill whenever the user needs to test for Perl-based privilege escalation on macOS, analyze PERL5OPT/PERL5LIB environment variable abuse, check for @INC path vulnerabilities, or assess CVE-2023-32369…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

macOS process abuse and injection techniques for security research. Use this skill when investigating macOS privilege escalation, analyzing process injection vectors, researching library injection, function hooking, IPC abuse, or application-specific…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

macOS Python application injection via PYTHONWARNINGS and BROWSER environment variables. Use this skill whenever you need to achieve code execution through Python on macOS, especially when you have write access to environment variables or can influence how…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

How to exploit RUBYOPT environment variable to inject code into Ruby applications on macOS. Use this skill whenever you need to perform privilege escalation on macOS systems running Ruby applications, or when analyzing Ruby-based vulnerabilities during…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

macOS network security assessment and hardening. Use this skill whenever the user mentions macOS security, network services, remote access (VNC, SSH, ARD, Screen Sharing), Bonjour, mDNS, service enumeration, privilege escalation, or security vulnerabilities.…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Guide for macOS security assessment, privilege escalation, and hardening. Use this skill whenever the user mentions macOS security, privilege escalation, TCC, SIP, file permissions, security auditing, or any macOS security-related task. This skill covers…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

macOS AMFI (AppleMobileFileIntegrity) security reference. Use this skill whenever the user asks about macOS kernel security, code signing enforcement, AMFI boot arguments, MACF policies, amfid daemon, provisioning profiles, or macOS privilege escalation…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Audit and analyze macOS authorization database and authd daemon for security assessments. Use this skill whenever you need to examine macOS privilege escalation vectors, check authorization rules in /var/db/auth.db, understand authd behavior, or test…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Analyze macOS code signatures, entitlements, and requirements in Mach-O binaries. Use this skill whenever the user needs to inspect code signing information, extract entitlements, analyze signature blobs, understand code signing flags, or work with…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Analyze macOS application entitlements for security implications, privilege escalation paths, and dangerous permissions. Use this skill whenever the user needs to audit macOS binaries for entitlements, assess security risks of entitlements, understand what…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Use this skill whenever you need to understand or apply macOS filesystem-based privilege escalation techniques, including POSIX permissions, symbolic/hard links, file descriptor manipulation, quarantine bypasses, code signature bypasses, and arbitrary write…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

macOS extended attributes (xattr) and Access Control Lists (ACLs) for file security. Use this skill whenever working with macOS file permissions, security hardening, privilege escalation research, or when you need to understand/modify ACLs and extended…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Analyze macOS Gatekeeper security mechanisms, check application signatures and notarization status, examine quarantine attributes, and assess Gatekeeper bypass vulnerabilities. Use this skill whenever the user needs to audit macOS application security,…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

macOS security analysis for launch constraints, trust caches, and binary execution restrictions. Use this skill whenever the user asks about macOS security mechanisms, launch constraints, trust cache enumeration, AMFI (Apple Mobile File Integrity), binary…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Analyze macOS Mandatory Access Control Framework (MACF) policies, kernel security extensions, and syscall hooks. Use this skill whenever the user mentions macOS security, MACF, kernel policies, sandbox analysis, AMFI, security kexts, or needs to understand…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Create and debug sandboxed macOS applications for security research and testing. Use this skill whenever the user mentions macOS sandboxing, app entitlements, codesigning, creating sandboxed apps, testing macOS security protections, privilege escalation…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Security testing skill for macOS Microsoft Office sandbox escape techniques. Use this skill when performing authorized security assessments, penetration testing, or vulnerability research on macOS Office applications. Trigger when users mention Office sandbox…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

How to debug, analyze, and bypass macOS sandbox restrictions. Use this skill whenever the user mentions macOS sandbox, app-sandbox entitlement, sandbox escape, privilege escalation on macOS, debugging sandboxed processes, Mach services, XPC, quarantine…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

macOS Sandbox security expert. Use this skill whenever the user asks about macOS sandboxing, sandbox profiles, SBPL, sandbox-exec, container inspection, sandbox extensions, or any macOS security isolation mechanism. Trigger for questions about sandbox…

Quellsprache: Englisch

Aktualisiert
Es werden 40 von 908 gesammelten Skills angezeigt.