jgamblin / blackhat-macos-config

Configure Your Macbook For Blackhat

Black Hat macOS Config

A simple shell script to configure your Mac to some of the most commonly recommended settings for the world's most dangerous hacking conferences (Black Hat/Defcon) or every day life.

Warning: Tool does not ask before making changes.

What It Does:

• Deletes Saved Wireless Networks.
• Disable Wireless Network Auto Join. < This cant be done programmatically. ¯\_(ツ)_/¯
• Require Password Immediately After Sleep
• Turns On Firewall.
  • Enables Stealth Mode
• Installs Needed System Updates.
• Validates System Integrity Protection is enabled.
• Enables Full Disk Encryption.

Note: Script Will Prompt For Password If Not Root.

Usage:

• Review for your preferences and comment out options You don't want.
• Set homessid and workssid variable to stop from deleting those!

To Run:

chmod +x blackhat-macos-config.sh
./blackhat-macos-config.sh

Important Notice

I likely don't know what I am doing and this could be done faster, better and simpler some other way. These scripts could also break your MacBook and make you cry.

blackhat-macos-config's Issues

L

Other thoughts

Turn off Bluetooth
Disable Touch ID
Not sure how you enable lock on close.

defaults write /Library/Preferences/com.apple.alf globalstate 1
doesn't block all connections - Any Sharing preferences have the ports open (Remote SSH, Remote Login)

I'd suggest something like total disable 802.11 and use USB-based tethering to your iPhone, but the LV cell sites probably don't have the bandwidth, and if they do, they're probably run by someone other than your phone carrier.