macOS enumeration

Get information from:

• Settings: Users and usernames

• Applications: some run on defaults, or there may be null or blank passwords

• Permissions on key directories and files

• Shares if macOS shares resources over the network

• Samba, the linux equivalent to smb, may give information about the windows network and its shares

• NFS information can give information on permissions and the network services

• Network services such as DNS, LDAP, SMTP, etc

• Various built-in commands and utilities

Tools

• macOS enumeration tools

Remediation

• Minimize the attack surface by removing any unnecessary or unused service.

• Ensure IPTables is configured to restrict the access.