hacktricks/macos-hardening/macos-security-and-privilege-escalation/macos-security-protections/macos-dangerous-entitlements.md

3.8 KiB

macOS Dangerous Entitlements

☁️ HackTricks Cloud ☁️ -🐦 Twitter 🐦 - 🎙️ Twitch 🎙️ - 🎥 Youtube 🎥

{% hint style="warning" %} Note that entitlements starting with com.apple are not available to third-parties, only APple can grant them. {% endhint %}

com.apple.security.get-task-allow

This entitlement allows to get the task port of the process run by the binary with this entitlement and inject code on it. Check this for more info.

com.apple.system-task-ports (previously called task_for_pid-allow)

This entitlement allows to get the task port for any process, except the kernel. Check this for more info.

☁️ HackTricks Cloud ☁️ -🐦 Twitter 🐦 - 🎙️ Twitch 🎙️ - 🎥 Youtube 🎥