D00MFist / PersistentJXA
Collection of macOS persistence methods and miscellaneous tools in JXA
☆261Updated last year
Related projects ⓘ
Alternatives and complementary repositories for PersistentJXA
- Tracking of offensive macOS tooling, blogs, and related helpful information☆151Updated this week
- Objective-C library and console to interact with Heimdal APIs for macOS Kerberos☆139Updated last year
- A macOS enumeration tool inspired by harmjoy's Windows-based Seatbelt enumeration tool. Author: Cedric Owens☆317Updated 2 years ago
- macOS Initial Access Payload Generator☆286Updated 10 months ago
- macOS persistence tool☆221Updated 2 years ago
- macOS Offensive Tools☆261Updated last year
- ☆99Updated 3 years ago
- Proof of concept MacOS post exploitation tool written in Swift. Designed as a POC for blue teams to build macOS detections. Author: Cedri…☆116Updated 3 years ago
- Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods.☆104Updated 2 years ago
- Interact with Chromium-based browsers' debug port to view open tabs, installed extensions, and cookies☆157Updated last year
- JavaScript for Automation (JXA) tool to do Active Directory enumeration.☆98Updated 2 years ago
- JXA situational awareness helper by simply reading specific files on a filesystem☆68Updated 2 years ago
- Swift 5 macOS agent☆99Updated 3 months ago
- Execute MachO binaries in memory using CGo☆79Updated 3 years ago
- Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" ma…☆439Updated 2 months ago
- StandIn is a small .NET35/45 AD post-exploitation toolkit☆253Updated 2 years ago
- Presentation material presented by Outflank team members at public events.☆181Updated this week
- JavaScript for Automation (JXA) macOS agent☆63Updated this week
- Payload designed for targeting Jamf enrolled devices.☆35Updated last year
- Zombie Ant Farm: Primitives and Offensive Tooling for Linux EDR evasion.☆219Updated 5 years ago
- Scripts (python3 and Swift) for macOS to recursively check /Applications and also check /usr/local/bin, /usr/bin, and /usr/sbin for binar…☆91Updated 2 years ago
- A Red Team tool for exfiltrating sensitive data from Confluence pages.☆105Updated last year
- ☆354Updated 3 months ago
- JXA and swift code that can perform some macOS situational awareness without generating TCC prompts.☆38Updated 2 years ago
- Red Team C2 Infrastructure built in AWS using Ansible!☆220Updated 4 years ago
- LDAP Querying without the Suck☆92Updated last week
- ☆181Updated 2 years ago
- ☆257Updated last year
- RACE is a PowerShell module for executing ACL attacks against Windows targets.☆212Updated last year