<p>/* osx-irony-assist.m</p><p> *</p><p> * Copyright (c) 2010 by <mu-b@digit-labs.org></p><p> *</p><p> * Apple MACOS X < 10.9/10? local root exploit</p><p> * by mu-b - June 2010</p><p> *</p><p> * - Tested on: Apple MACOS X <= 10.8.X</p><p> *</p><p> * $Id: osx-irony-assist.m 16 2015-04-10 09:34:47Z mu-b $</p><p> *</p><p> * The most ironic backdoor perhaps in the history of backdoors.</p><p> * Enabling 'Assistive Devices' in the 'Universal Access' preferences pane</p><p> * uses this technique to drop a file ("/var/db/.AccessibilityAPIEnabled")</p><p> * in a directory,</p><p> *</p><p> * drwxr-xr-x 62 root wheel 2108 9 Apr 16:23 db</p><p> *</p><p> * without being root, now how did you do that?</p><p> *</p><p> * Copy what you want, wherever you want it, with whatever permissions you</p><p> *...
<p>/* osx-irony-assist.m</p><p> *</p><p> * Copyright (c) 2010 by <mu-b@digit-labs.org></p><p> *</p><p> * Apple MACOS X < 10.9/10? local root exploit</p><p> * by mu-b - June 2010</p><p> *</p><p> * - Tested on: Apple MACOS X <= 10.8.X</p><p> *</p><p> * $Id: osx-irony-assist.m 16 2015-04-10 09:34:47Z mu-b $</p><p> *</p><p> * The most ironic backdoor perhaps in the history of backdoors.</p><p> * Enabling 'Assistive Devices' in the 'Universal Access' preferences pane</p><p> * uses this technique to drop a file ("/var/db/.AccessibilityAPIEnabled")</p><p> * in a directory,</p><p> *</p><p> * drwxr-xr-x 62 root wheel 2108 9 Apr 16:23 db</p><p> *</p><p> * without being root, now how did you do that?</p><p> *</p><p> * Copy what you want, wherever you want it, with whatever permissions you</p><p> * desire, hmmm, backdoor?</p><p> *</p><p> * This is now fixed, so I guess this is OK :-)</p><p> *</p><p> * - Private Source Code -DO NOT DISTRIBUTE -</p><p> * <a href="http://www.digit-labs.org/" rel="nofollow">http://www.digit-labs.org/</a> -- Digit-Labs 2010!@$!</p><p> */</p>
