Code injection Post: 302594222

Sponsored Content

Operating Systems OS X (Apple) Code injection Post 302594222 by iModdr on Monday 30th of January 2012 11:33:46 PM

01-31-2012

Registered User

Code injection

Im needing to create a postinst script for a debian package. I need it to search for this line of script in a plist file located at /folder/folder/folder/folder/folder/file.plist

Code:

<key>TESTKEYLINE</key>
<true/>

and after it create a new line and insert this code

Code:

<key>KEYNAME</key>
	<array>
		<dict>
			<key>KEY</key>
			<false/>
			<key>SUBJECT</key>
			<string>SUBJECT NAME</string>
			<key>SUBJECTIMAGE</key>
			<string>IMAGE.png</string>
			<key>IMAGESETTINGSBASEDONCONDITON</key>
			<string>2NDIMAGE.png</string>
			<key>SUBJECT</key>
			<string>SUBJECTNAME</string>
			<key>IMAGESETTINGSBASEDONCONDITON</key>
			<string>3RDIMAGE.png</string>
		</dict>
	</array>

After the code is pasted on the plist file I need it to require a reboot.

Sorry about the vagueness of the code, but I don't want this being in someone else's hands.

iModdr

View Public Profile for iModdr

Find all posts by iModdr

5 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

javascript injection

Please advise a script to get rid of the following code which is infected in a large number of files ( in particular php and html files ) <div id="testws35fdgh"></div> <script language="JavaScript"> var0 = "\x69\x3c\x33\x27\x34\x38\x30\x75\x3b\x34"; var1 =...

2. Shell Programming and Scripting

SQL Injection Detection

I want to grep/awk /var/log/httpd/mysite-access_log.log and check if 2 words from the following appear in a single line: benchmark union information_schema drop truncate group_concat into file case hex lpad group order having insert union select from

3. Red Hat

Cause PCIe error callbacks using AER injection

I am trying to cause a callback in the Linux nvme driver by using AER injection. I've modified the AER source code to directly inject errors through module loading rather than from userland program. I've verified that I got the correct bus, dev, and fn and that the error injection went...

4. Shell Programming and Scripting

Making a script secure to code injection

Heyas I've been told my scipts would be insecure, and to fix that. Figured i might rethink some parts of my coding style, meanwhile i tried to write an additional catcher. After reading: fail : Security Issues - didnt help too much, infact - it confused me even more. n/a:...

5. What is on Your Mind?

Revive Ad Server MySQL Injection Attack

No rest for the weary, a Revive Ad Server I am responsible for experienced a MySQL injection attack due to a vulnerability uncovered in the past few months. I was busy developing Vue.js code for the forums and thought to myself "I will get around to upgrading to Revive 4.2.0 (supposedly the...

LEARN ABOUT ULTRIX

rmf

rmf(1mh) rmf(1mh)

Name
rmf - remove folder

Syntax
rmf [ +folder ] [ -help ] [ -[no]interactive ]

Description
The command removes all of the messages within the current folder, and then removes the folder itself. If there are any files within the
folder which are not part of MH, they are not removed, and an error message is displayed.

You can specify a folder other than the current folder by using the +folder argument. If you do not specify a folder, and cannot find the
current folder, asks you whether you want to delete instead.

If the current folder is removed, it makes current.

Note that the command irreversibly deletes messages that do not have other links, so use it with caution.

If the folder being removed is a sub-folder, the parent folder becomes the new current folder, and tells you that this has happened. This
provides an easy mechanism for selecting a set of messages, operating on the list, then removing the list and returning to the current
folder from which the list was extracted.

Using to delete a read-only folder deletes the private sequence and current message information from the file, without affecting the folder
itself. If you have sub-folders within a folder, you must delete all the sub-folders before you can delete the folder itself.

Options
-help Prints a list of the valid options to this command.

-interactive
-nointeractive
Asks for confirmation before deleting a folder. By default, deletes a folder and its messages without asking for confirmation.
If you specify the -interactive option, asks if you are sure before deleting the folder. You are advised to use this option,
since when deletes a folder its contents are lost irretrievably.

Examples
This example shows how asks for confirmation when the -interactive option is used:
% rmf -interactive +test
Remove folder "test"? y

Profile Components
Path: To determine the user's Mail directory

Files
The user profile.