4 ms·
Augmented it with a bit of Ruby in order to find the "SUFeedURL", which if using the `http` protocol, means that an application is vulnerable. https://gist.git
by 5vforest 11y ago
Augmented it with a bit of Ruby in order to find the "SUFeedURL", which if using the `http` protocol, means that an application is vulnerable.
https://gist.github.com/ajb/876107d0edc0f2c11779 https://gist.github.com/ajb/876107d0edc0f2c11779
- mh- 11y agoFYI, it can be stored in theoretically any key. But it's probably worth looking for SUFeedURL* at least. % plutil -p /Applications/iTerm.app/Contents/Info.plist| grep SUFeedURL "SUFeedURLForFinal" => "https://iterm2.com/appcasts/final.xml" "SUFeedURLForTesting" => "https://iterm2.com/appcasts/testing3.xml"
- 5vforest 11y agoGood info! I really have no clue what I'm doing. Just trying to help coworkers figure out if they need to uninstall any apps, really :)