Skip to content

Instantly share code, notes, and snippets.

@sa7mon

sa7mon/scanSparkle.sh

Last active March 10, 2021 08:11
Show Gist options
  • Star 3 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save sa7mon/7568659790b8a38c6bd9 to your computer and use it in GitHub Desktop.
Save sa7mon/7568659790b8a38c6bd9 to your computer and use it in GitHub Desktop.
Download ZIP
Scan your Mac for application feed URLs with the Sparkle Updater Framework. URL's that aren't HTTPS are vulnerable to MITM
Raw
scanSparkle.sh
find /Applications -name Sparkle.framework -exec defaults read {}/../../Info.plist SUFeedURL \;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment