CatalogLOOBins

ORCHARD · Tool

mktemp

2 techniquesmacOSLOOBinsGPL-3.0

Generate payload directory (Shlayer)

Defense EvasionmacOS

The following command can be used to generate a random directory name for staging payloads

export tmpDir="$(mktemp -d /tmp/XXXXXXXXXXXX)"
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Defense Evasion
Detection
No detections at time of publishing: No detections at time of publishing

Generate directory based on template file (Bundlore)

Defense EvasionmacOS

The following command can be used to generate a unique directory based on a template

TMP_DIR="mktemp -d -t x"
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Defense Evasion
Detection
No detections at time of publishing: No detections at time of publishing