+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Remote Administration & Stress Testing (https://sinister.li/Forum-Remote-Administration-Stress-Testing)
+--- Thread: [REQ] Mac OS RAT? (/Thread-REQ-Mac-OS-RAT)
Pages:
1
2
[REQ] Mac OS RAT? - zorrophreak - 08-24-2016
I'm wondering if anyone has a leak for a Mac OS RAT, preferrably with one that has a Windows client. I know of Hellraiser and Blackhole (Hellraiser has no windows client and I can't find a download, and Blackhole I can't find a download.)
Any others and any downloads/leaks you know of?
RE: [REQ] Mac OS RAT? - Wildfire - 08-25-2016
There's Java based ones, there isn't any really good ones though.
RE: [REQ] Mac OS RAT? - phyrrus9 - 08-25-2016
(08-24-2016, 10:58 PM)zorrophreak Wrote: I'm wondering if anyone has a leak for a Mac OS RAT, preferrably with one that has a Windows client. I know of Hellraiser and Blackhole (Hellraiser has no windows client and I can't find a download, and Blackhole I can't find a download.)
Any others and any downloads/leaks you know of?
Write one? Mac OS X uses a hybrid Mach kernel, meaning you CAN load arbitrary drivers in (as long as a user has disabled AMFI, which like android, most do). Unfortunately, you will not be able to get root access, because with the dawn of 10.9 there is no longer a superuser and the entire kernel runs unprivileged.
(08-25-2016, 12:17 AM)Axi Wrote: There's Java based ones, there isn't any really good ones though.
Most people who seriously use a mac (myself included) don't install Java.
RE: [REQ] Mac OS RAT? - zorrophreak - 08-25-2016
(08-25-2016, 12:44 AM)phyrrus9 Wrote: Most people who seriously use a mac (myself included) don't install Java.
b..b.b...bbut minecraft?? (lol)
And Writing one I suppose isn't a bad option, didn't know there was no superuser anymore. that is kind of great.
RE: [REQ] Mac OS RAT? - phyrrus9 - 08-25-2016
(08-25-2016, 12:54 AM)zorrophreak Wrote:(08-25-2016, 12:44 AM)phyrrus9 Wrote: Most people who seriously use a mac (myself included) don't install Java.
b..b.b...bbut minecraft?? (lol)
And Writing one I suppose isn't a bad option, didn't know there was no superuser anymore. that is kind of great.
Java is a curse on humanity and needs to be burned at the steak. Rootless is fairly new, but honestly for most of the stuff you need, all you need to do is have the user disable AMFI for a few moments so you can load a new kext. Or, exploit one of the existing ones.
RE: [REQ] Mac OS RAT? - Razor Dz Trigger - 08-27-2016
Use JRAT for hacking Mac OS or Linux
RE: [REQ] Mac OS RAT? - phyrrus9 - 08-27-2016
(08-27-2016, 12:54 AM)Razor Dz Trigger Wrote: Use JRAT for hacking Mac OS or Linux
And how do you plan to get around rootless, ASLR, KASLR, sandboxing, and OS-wide privacy?
RE: [REQ] Mac OS RAT? - meow - 08-27-2016
All of the Java RATs made for RAT'ing macs are completely terrible. I highly advice against using any of them.
For anyone looking to control someone's mac, one important thing to remember is that you are not restricted to the OS's native language (objective-C). You could have your target execute a bash script (or even just a command for that matter), a python script (python is pre-installed on Mac OSX 10.8, don't know about other versions), a compiled C file, anything you can think of. One time I was able to get sudo privileges on a kid's mac by telling him to run a command which I told him would "hack a website".
You're only limited by your imagination.
RE: [REQ] Mac OS RAT? - phyrrus9 - 08-27-2016
(08-27-2016, 04:19 AM)meow Wrote: All of the Java RATs made for RAT'ing macs are completely terrible. I highly advice against using any of them.
For anyone looking to control someone's mac, one important thing to remember is that you are not restricted to the OS's native language (objective-C). You could have your target execute a bash script (or even just a command for that matter), a python script (python is pre-installed on Mac OSX 10.8, don't know about other versions), a compiled C file, anything you can think of. One time I was able to get sudo privileges on a kid's mac by telling him to run a command which I told him would "hack a website".
You're only limited by your imagination.
Even with "sudo privileges" (aka, the guys password) you still don't have full root access. The root user has the same privileges as any other user as of 10.9. Beyond that, they implement AMFI (code page signatures) that prevent you from actually modifying anything important unless you can resign it (aka no kernel injection). You're better off with a MACHO DYLD insert (which wont work anymore, the load commands are signed now as well)
RE: [REQ] Mac OS RAT? - meow - 08-27-2016
(08-27-2016, 08:26 AM)phyrrus9 Wrote:(08-27-2016, 04:19 AM)meow Wrote: All of the Java RATs made for RAT'ing macs are completely terrible. I highly advice against using any of them.
For anyone looking to control someone's mac, one important thing to remember is that you are not restricted to the OS's native language (objective-C). You could have your target execute a bash script (or even just a command for that matter), a python script (python is pre-installed on Mac OSX 10.8, don't know about other versions), a compiled C file, anything you can think of. One time I was able to get sudo privileges on a kid's mac by telling him to run a command which I told him would "hack a website".
You're only limited by your imagination.
Even with "sudo privileges" (aka, the guys password) you still don't have full root access.
Why are you so hellbent on replying to EVERY post in this thread saying how you can't root mac how it no longer has a superuser and shit? You made 1 post about it and that's all we need, we don't need to you say it 3 more fucking times, thank you though.
Also, I'm well aware that sudo privileges doesn't mean root access.