CatalogLOOBins

ORCHARD · Tool

networksetup

11 techniquesmacOSLOOBinsGPL-3.0

network device enumeration

DiscoverymacOS

Use networksetup to display services with corresponding port and device in order they are tried for connecting to a network.

networksetup -listnetworkserviceorder
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Discovery
Detection
No detections at time of publishing: No detections at time of publishing

Detect connected network hardware

DiscoverymacOS

Use networksetup to detect new network hardware and create a default network service on the hardware.

networksetup -detectnewhardware
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Discovery
Detection
No detections at time of publishing: No detections at time of publishing

network device enumeration

DiscoverymacOS

Use networksetup to list all network interfaces, providing name, device name, MAC address.

networksetup -listallhardwareports
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Discovery
Detection
No detections at time of publishing: No detections at time of publishing

network device enumeration

DiscoverymacOS

Use networksetup to list all network interface names.

networksetup -listallnetworkservices
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Discovery
Detection
No detections at time of publishing: No detections at time of publishing

DNS server enumeration

DiscoverymacOS

Use networksetup to get configured DNS servers for a specific interface.

networksetup -getdnsservers Wi-Fi
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Discovery
Detection
No detections at time of publishing: No detections at time of publishing

Enumerate configured web proxy URL for an interface

DiscoverymacOS

Displays web proxy auto-configuration information for the specified interface.

networksetup -getautoproxyurl "Thunderbolt Ethernet"
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Discovery
Detection
No detections at time of publishing: No detections at time of publishing

Enumerate configured web proxy for an interface

DiscoverymacOS

Displays standard web proxy information for the specified interface.

networksetup -getwebproxy "Wi-Fi"
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Discovery
Detection
No detections at time of publishing: No detections at time of publishing

Set the https web proxy for an interface

macOS

Use networksetup to set the https web proxy for an interface.

networksetup -setsecurewebproxy "Wi-Fi" 46.226.108.171
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Command and Control
Detection
No detections at time of publishing: No detections at time of publishing

Set the http web proxy for an interface

macOS

Use networksetup to set the http web proxy for an interface.

networksetup -setwebproxy "Wi-Fi" 46.226.108.171
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Command and Control
Detection
No detections at time of publishing: No detections at time of publishing

Set auto proxy URL for an interface

macOS

Use networksetup to set the proxy URL for an interface.

networksetup -setautoproxyurl "Wi-Fi" $autoProxyURL
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Command and Control
Detection
No detections at time of publishing: No detections at time of publishing

Enable auto proxy state

macOS

Use networksetup to enable the proxy auto-config

networksetup -setautoproxystate "Wi-Fi" on
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Command and Control
Detection
No detections at time of publishing: No detections at time of publishing