Skip to content

Instantly share code, notes, and snippets.

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>allow-root</key>
<true/>
<key>authenticate-user</key>
<true/>
<key>class</key>
<string>user</string>
@pudquick
pudquick / Info.plist
Last active August 29, 2015 13:57
Minecraft Info.plist changes for JRE 7
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist SYSTEM "file://localhost/System/Library/DTDs/PropertyList.dtd">
<plist version="1.0">
<dict>
<key>CFBundleDevelopmentRegion</key> <string>en</string>
<key>CFBundleName</key> <string>MinecraftLauncher</string>
<key>CFBundleVersion</key> <string>1.0.1</string>
<key>CFBundleShortVersionString</key> <string>MinecraftLauncher 1.0.1</string>
<key>CFBundleExecutable</key> <string>LaunchGame</string>
<key>CFBundlePackageType</key> <string>APPL</string>
@pudquick
pudquick / iokit-personalities.plist
Last active August 29, 2015 13:57
DisplayLink IOKitPersonalities
<key>IOKitPersonalities</key>
<dict>
<key>DisplayLink0</key>
<dict>
<key>CFBundleIdentifier</key>
<string>com.displaylink.driver.DisplayLinkDriver</string>
<key>IOClass</key>
<string>DisplayLinkParent</string>
<key>IOMatchCategory</key>
<string>DisplayLinkParent0</string>
@pudquick
pudquick / protections.ps1
Last active August 29, 2015 14:01
misc antiviral
AccessProtection {
UserString UR1 "Prevent evil programs from creating *.exe under application data (2000/XP)"
UserEnforce UR1 0
UserReport UR1 1
UserProcess UR1 {Include iexplore.exe java.exe javaw.exe javaws.exe}
UserRule UR1 G_User {File C { Include "**\\Documents and Settings\\**\\Application Data\\**\\*.exe" }
}
UserString UR10 "CryptoLocker HKCU\\....\\Run"
UserEnforce UR10 1
UserReport UR10 1
from ctypes import CDLL, Structure, POINTER, c_int32
CFoundation = CDLL('/System/Library/Frameworks/CoreFoundation.Framework/Versions/Current/CoreFoundation')
from CoreFoundation import kCFStringEncodingUTF8
class OpaqueType(Structure):
pass
OpaqueTypeRef = POINTER(OpaqueType)
CFArrayCreateMutable = CFoundation.CFArrayCreateMutable
<QueryList>
<Query Id="0" Path="System">
<Select Path="System">
*[EventData/Data[6]]
</Select>
</Query>
</QueryList>
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>PayloadCertificateFileName</key>
<string>my.org.cer</string>
<key>PayloadContent</key>
#include <CoreFoundation/CoreFoundation.h>
CFPropertyListRef _CFPreferencesCopyApplicationMap(CFStringRef userName, CFStringRef hostName);
int main()
{
CFPropertyListRef app_map;
app_map = _CFPreferencesCopyApplicationMap(kCFPreferencesCurrentUser, kCFPreferencesAnyHost);
@pudquick
pudquick / root.plist
Created July 31, 2014 21:47
root record
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>dsAttrTypeStandard:AppleMetaNodeLocation</key>
<array>
<string>/Local/Default</string>
</array>
<key>dsAttrTypeStandard:AuthenticationAuthority</key>
<array>