Hello, Khabrovites. In anticipation of the start of the course "Pentest. Practice of Penetration Testing", we invite you to sign up for an open lesson on the topic "Windows ad: collecting information, escalating privileges . "
And also we want to share with you another author's article from our expert - Alexander Kolesnikov.
Typically, the infrastructure is built on Linux and Windows operating systems. And it would seem, why bother with the problems of other operating systems? It's simple. Pentest is a constant development, the study of new technologies. In addition, machines in the infrastructure that run on the macOS operating system are no longer such a rarity.
The article does not claim to be complete information on the MacOS platform, but only demonstrates mechanisms and data that, in the opinion of the author, can be useful.
MacOS
MacOS — , “” . , , Linux. , XNU (X is Not Unix). , - . , , :
. “Directory Services”. , , . , , BSD . , MacOS Darwin, Open Source .
macOS 2 :
MacOS — , Apple.
MacOS Server — , .
Apple, . MacOS MDM OpenDirectory , Server. , . , macOS Server:
Open Directory — , Active Directory OC Windows.
Profile Manager — .
Xsan — .
, Active Directory. MacOS, , , , Windows AD. MacOS Open Directory — Active Directory.
MacOS
, macOS . , , . , macOS (System Preferences->Users&Groups):
Standart user — , .
Administrator — , , , .
Sharing Only — , .
Groups — , Linux/Unix , , .
root, Apple . , Windows . , , dscl — “” , , .
, , , , :
dscl . ls /Users
, , 1 , 141 . “” , .
, . macOS , Windows AD. — “property” . , ls cat:
dscl . cat /Users/daemon
, . “” , — root:
, plist — iOS macOS . “Property” “” Active Directory. SMBSID, RecordName UniqueId. . dscl :
dscl . ls /
, Active Directory macOS. , Windows net users/net groups
.
MacOS Active Directory
AD. , macOS. , ? LDAP? ? ?
:
, :
:
:
, .
. , , . , , , , macOS. ? macOS .