Skip to content

Instantly share code, notes, and snippets.

@majormoses
Last active July 10, 2019 19:59
Show Gist options
  • Save majormoses/54b631d3308dd65bc086462ee9c0e332 to your computer and use it in GitHub Desktop.
Save majormoses/54b631d3308dd65bc086462ee9c0e332 to your computer and use it in GitHub Desktop.
A script to mitigate concerns with zoom RCE and video through the installed webserver, see https://link.medium.com/8iiKfpAyaY for more details
#!/bin/bash
if [[ "$OSTYPE" == "darwin"* ]]; then
# detect os
echo "detected: ${OSTYPE}"
# delete the `.zoomus` if its a folder
if [[ -d ~/.zoomus ]]; then
rm -rf ~/.zoomus
fi
# touch the file and update its properties if it does not exist as a file (not a directory)
if [[ ! -f ~/.zoomus ]]; then
touch ~/.zoomus
# make file immutable / chattr linux equivalent
sudo chflags schg ~/.zoomus
chflags uchg ~/.zoomus
fi
exit 0
else
echo "detected: ${OSTYPE}"
echo "this only supports OSX as the vulnerability is specific to its client implementation"
exit 1
fi
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment