macOS Gatekeeper Check Bypass
Posted by deepcore on May 8, 2021 – 1:32 am
This Metasploit module serves an OSX app (as a zip) that contains no Info.plist, which bypasses gatekeeper in macOS versions prior to 11.3. If the user visits the site on Safari, the zip file is automatically extracted, and clicking on the downloaded file will automatically launch the payload. If the user visits the site in another browser, the user must click once to unzip the app, and click again in order to execute the payload.
Post a reply
You must be logged in to post a comment.