EH-Net

Ethical Hacking Discussions and Related Certifications => Incident Response => Topic started by: wishi on February 28, 2009, 04:57:09 AM

Title: Daily MacOS X enumeration
Post by: wishi on February 28, 2009, 04:57:09 AM

Hi!

I want to log and to enumerate some MacOS X systems on a daily base.

what software is installed
which kernel extensions
how many users
and more

For Windows or Linux there're a lot of scripts out there. Does anyone at least know the commands for MacOS user enumeration (Terminal based)? Which Apple-userland applications that create textual output to log all this can you use?

Thanks,
wishi

Title: Re: Daily MacOS X enumeration
Post by: LSOChris on February 28, 2009, 07:04:24 AM

it should be very similar to any linux scripts since OS X is bsd based.

Title: Re: Daily MacOS X enumeration
Post by: wishi on February 28, 2009, 07:51:48 AM

Should be, but isn't. Listing users/groups is entirely different. I think you have to use dscl, but the documentation is very poor. Installed software gets into some kind of database... differs a lot.