AppleScript (in)Security in OS X
Agent OJ explores applescript (in)security in os x at DEF CON 10, examining applescript and practical defenses.
Summary
Architecture and Background
Agent OJ - Applescript (in)Security in OS X AgentOJ, a Macintosh programmer for Team2600, will be speaking on Applescript in the OS X environment, covering both attack and defense tools using Applescript.
Vulnerability Analysis
Topics covered will include: Applescript as an information gathering tool (system info, list of users, open services, etc).
Exploitation and Demonstrations
Applescript as an attack tool (applescript trojans, destructive scripts, exploiting scriptable applications, and a proof of concept applescript trojan).
Remediation and Defensive Strategies
Applescript as a defense tool (log checking, locking down an OS X system, automating network security scripts, and a proof of concept applescript defense suite). General applescript security practices will also be covered.
Related talks
HITCON·43 min
Presenters detail vulnerability discovery and exploitation in Endpoint Security or End of Security? Exploiting Trend Micro Apex One | HITCON CMT 2023.
Fortinet·5 min
Engineers explore architecture and security mechanisms for See How FortiEDR Detects and Defuses Lateral Movement | Endpoint Security.
Village Presentations·51 min
Dave Kennedy
TrustedSec founder Dave Kennedy analyzes the dominance of targeted phishing attacks, demonstrating macro weaponization, PowerShell evasion, and lateral movement.