np5

nikolay-n

#!/usr/bin/python2.7
# -*- coding: utf-8 -*-

'''
Defaults Monitor - tool to sniff defaults keys and values using unified log
to launch use standard python 2.7, eg python2.7 ./defsmon.py

'''

import os

gregneagle

CC=gcc
CFLAGS=
SIGNINGIDENTITY="insert signing identity here"
IDENTIFIER=com.someorg.fudo.changeme


fudo: main.c
	$(CC) -o fudo main.c
	codesign -s $(SIGNINGIDENTITY) -i $(IDENTIFIER) fudo

pudquick

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>PayloadContent</key>
	<array>
		<dict>
			<key>PayloadDisplayName</key>
			<string>Privacy Preferences Policy Control</string>
			<key>PayloadIdentifier</key>

haircut

#!/usr/bin/python
"""
Completely reset TCC services database in macOS

Note: Both the system and individual users have TCC databases; run the script as both
      a user and as root to completely reset TCC decisions at all levels.

2018-08-15: Resetting the 'Location' service fails; unknown cause
2018-08-16: Confirmed the 'All' service does not really reset _all_
            services, so individual calls to each service is necessary.

pudquick

import objc
from ctypes import create_string_buffer, c_void_p, cast
from Foundation import NSBundle

Security = NSBundle.bundleWithIdentifier_('com.apple.security')

# CMSDecoder.h
kCMSSignerUnsigned = 0
kCMSSignerValid = 1
kCMSSignerNeedsDetachedContent = 2

tburgin

from AppKit import NSRunningApplication

print NSRunningApplication.runningApplicationsWithBundleIdentifier_("com.google.Chrome").count()

MagerValp

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>PayloadContent</key>
	<array>
		<dict>
			<key>AllowUserOverrides</key>
			<true/>
			<key>AllowedTeamIdentifiers</key>

zoocoup

###  Updated to reflect changes introduced with 10.13.4. Update to 10.13.4 if needed before attempting to make 
SecureToken-related changes. ###

sysadminctl is a tool Apple introduced in 10.10 for working with system user accounts. In 10.13, sysadminctl is Apple's 
recommended tool for working with user accounts in the CLI, replacing functionality that has long been provided by dscl 
and adds new features available only in 10.13. sysadminctl can be used to change user passwords, create new users or 
check the status of a new-to-10.13 security feature named SecureToken.

SecureToken is a non-visible APFS file system attribute, unlike the SIP protected flag or file creation date, that triggers 
the creation of a new AuthenticationAuthority entry in a user's local account record 

opragel

#!/bin/bash
# Seriously there still apparently aren't enough warning labels
# If you don't understand the consequences don't do it

REMOVE_PATHS=( # "/var/db/ConfigurationProfiles/.passcodePolicesAreInstalled"
               # "/var/db/ConfigurationProfiles/.cloudConfigHasActivationRecord"
               # "/var/db/ConfigurationProfiles/.cloudConfigNoActivationRecord"
               # "/var/db/ConfigurationProfiles/.cloudConfigProfileObtained"
               # "/var/db/ConfigurationProfiles/.cloudConfigRecordFound"
               # "/var/db/ConfigurationProfiles/.profilesAreInstalled"