Description In versions of Mac OS X before 10.11.1, the applescript:// URL scheme is provided, which opens the provided script in the Applescript Editor. Pressing cmd-R in the Editor executes the code without any additional confirmation from the user. By getting the user to press cmd-R in Safari, and by hooking the cmd-key keypress event, a user can be tricked into running arbitrary Applescript co
![Safari User-Assisted Applescript Exec Attack](https://cdn-ak-scissors.b.st-hatena.com/image/square/e81f28b65639a6008648f1da59aa6219da4fcaf6/height=288;version=1;width=512/https%3A%2F%2Fwww.rapid7.com%2Fglobalassets%2Frapid7-og.jpg)