How to Backup and Pwn using Time Machine

macOS Time Machine's backup mechanism as an unexpected attack surface for privilege escalation.

POC 2022
View slides

Talk delivered at Power of Community (POC) 2022 (Seoul, November 2022). The research examines how macOS Time Machine’s backup and restore workflows introduce privileged operations that can be abused by a local attacker to escalate privileges, bypassing standard macOS hardening features.

Slides available on GitHub