Using Osquery to Detect Reverse Shells on MacOS

A deeper look into the significance of TTYs for detection

Chris Long

7 minute read

<p>One challenge when it comes to building defenses for MacOS are the numerous scripting languages that come pre-installed with the operating system. While it may be convenient for developers, it provides attackers with a variety of methods for establishing persistence and bootstrapping connections to command and control servers.</p>

pwnable.kr: [mistake]

A walkthrough of the 'mistake' challenge

Chris Long

5 minute read

mistake <p>As my first post, I thought I would do a quick writeup of the <a href="http://pwnable.kr/play.php">Mistake</a> challenge found on <a href="http://pwnable.kr">pwnable.kr</a>. This challenge took me a bit longer than I expected, but the mistake does turn out to have interesting side effects.</p>