# profiles

> List and remove configuration profiles.

Profiles on macOS are responsible for managing different types of profiles including configuration, provisioning, bootstraptoken, or enrollment. However, starting from macOS 11.0, this tool cannot be used for installing configuration profiles.

- Page: https://loobins.io/binaries/profiles/
- Author: Will Huang (@In0de_16)
- Created: 2023-05-16
- Tactics: Discovery, Impact

## Paths

- `/usr/bin/profiles`

## Example Use Cases

### Collect system DEP information.

The following command determines whether device is DEP(Device Enrolment Program) enabled and output the DEP information.

```bash
sudo profiles show -type enrollment
```

- Tactics: Discovery
- Tags: oneliner

### Remove configuration profiles.

The following command deletes the specified profiles. An optional password used when removing a configuration profile which requires the password removal option.

```bash
profiles remove -identifier com.profile.identifier -password <password>
```

- Tactics: Impact
- Tags: oneliner

## Detections

- No detections at time of publishing.

## Resources

- [macOS MDM introduction.](https://book.hacktricks.xyz/macos-hardening/macos-security-and-privilege-escalation/macos-mdm)