4n7m4n – Medium

Pinned

4n7m4n

Careful Who You Colab With:

abusing google colaboratory

10 min readJul 27, 2022

--

1

Careful Who You Colab With:

--

1

4n7m4n

Jumping Over the Gate

Detecting and Mitigating the GateKeeper User Override on macOS in an Enterprise Environment

19 min readSep 27, 2022

--

Jumping Over the Gate

--

4n7m4n

Defeating Malicious Launch Persistence

A New Mitigation Strategy for the most used macOS Persistence Technique

11 min readNov 23, 2021

--

Defeating Malicious Launch Persistence

--

4n7m4n

Acting Red — Seeing Blue

Observing Your macOS Red Team attack footprint like an EDR with a HELK Lab

7 min readJul 27, 2021

--

Acting Red — Seeing Blue

--

4n7m4n

Stealing All of the Confluence Things

Introducing Conf-Thief

4 min readJun 8, 2021

--

Stealing All of the Confluence Things

--

4n7m4n

Abusing the Google People API

Introducing G-Dir Thief

3 min readMay 5, 2021

--

Abusing the Google People API

--

4n7m4n

You’re a GD Thief!

Introducing a tool for exfiltrating all of the things from a Google Drive

10 min readApr 28, 2021

--

You’re a GD Thief!

--

4n7m4n

Who has full-disk access?

Enumerating TCC.db with JXA

2 min readApr 17, 2021

--

Who has full-disk access?

--

4n7m4n

MacOS Native API calls in Electron

How to get your electron app to do Mac stuff.

9 min readJan 6, 2021

--

1

MacOS Native API calls in Electron

--

1

4n7m4n

Red Teaming: From the Military to Corporate Information Security Teams

Are you really going here?

10 min readApr 22, 2020

--

Red Teaming: From the Military to Corporate Information Security Teams

--

4n7m4n

4n7m4n

Red Team Pen Testing Nobody | OSCP | InfoSec | Tech Junkie | OIF Veteran | Tweets are mine, not yours, nor anyone else's... Certainly not my employer's

Following

Help
Status
About
Careers
Blog
Privacy
Terms
Text to speech
Teams