Alternatives and similar repositories for MacShellSwift

Users that are interested in MacShellSwift are comparing it to the libraries listed below

• xorrior / macOSTools
  macOS Offensive Tools
  ☆269Updated last year
• XMCyber / MacHound
  ☆98Updated 4 years ago
• cedowens / Swift-Attack
  Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods.
  ☆107Updated 2 years ago
• its-a-feature / bifrost
  Objective-C library and console to interact with Heimdal APIs for macOS Kerberos
  ☆150Updated last year
• CyborgSecurity / PoisonApple
  macOS persistence tool
  ☆225Updated 3 years ago
• D00MFist / PersistentJXA
  Collection of macOS persistence methods and miscellaneous tools in JXA
  ☆279Updated last year
• cedowens / EntitlementCheck
  Scripts (python3 and Swift) for macOS to recursively check /Applications and also check /usr/local/bin, /usr/bin, and /usr/sbin for binar…
  ☆97Updated 2 years ago
• slyd0g / SwiftInMemoryLoading
  Swift implementation of in-memory Mach-O loading on macOS
  ☆63Updated 2 years ago
• its-a-feature / LockSmith
  ObjectiveC CLI tool for interacting with macOS Keychain
  ☆79Updated 2 years ago
• cedowens / SwiftBelt
  A macOS enumeration tool inspired by harmjoy's Windows-based Seatbelt enumeration tool. Author: Cedric Owens
  ☆329Updated 3 years ago
• slyd0g / SwiftParseTCC
  Use "Full Disk Access" permissions to read the contents of TCC.db and display it in human-readable format
  ☆39Updated 3 years ago
• SpiderLabs / SCShell
  Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
  ☆113Updated 5 years ago
• richiercyrus / Venator
  [⛔️ Deprecated] Venator is a python tool used to gather data for proactive detection of malicious activity on macOS devices.
  ☆177Updated 4 years ago
• breakpointHQ / TCC-ClickJacking
  A proof of concept for a clickjacking attack on macOS.
  ☆95Updated last year
• FSecureLABS / CalendarPersist
  JXA script to allow programmatic persistence via macOS Calendar.app alerts.
  ☆43Updated 4 years ago
• FuzzySecurity / BlueHatIL-2020
  BlueHatIL 2020 - Staying # and Bringing Covert Injection Tradecraft to .NET
  ☆146Updated 5 years ago
• djhohnstein / macos_shell_memory
  Execute MachO binaries in memory using CGo
  ☆81Updated 4 years ago
• cedowens / SwiftBelt-JXA
  JXA implementation of some SwiftBelt functions. Author: Cedric Owens
  ☆44Updated 2 years ago
• xorrior / poseidon
  Apfell Golang macOS/Linux/Windows implant
  ☆89Updated 3 years ago
• skelsec / pypykatz_agent_dn
  Pypykatz agent implemented in .NET
  ☆86Updated 6 years ago
• MythicAgents / orthrus
  Uses Apple's MDM protocol to backdoor a device with a malicious profile.
  ☆54Updated 3 years ago
• tyranid / infosec-presentations
  A repository of previous info-sec presentations I've presented.
  ☆161Updated 7 months ago
• G0ldenGunSec / PowerPriv
  A Powershell implementation of PrivExchange designed to run under the current user's context
  ☆125Updated 6 years ago
• its-a-feature / HealthInspector
  JXA situational awareness helper by simply reading specific files on a filesystem
  ☆78Updated 3 years ago
• richiercyrus / Venator-Swift
  Swift Command line tool used for proactive detection of malicious activity on macOS systems.
  ☆68Updated 4 years ago
• cedowens / Inject_Dylib
  Swift code to programmatically perform dylib injection
  ☆51Updated 2 years ago
• mandiant / flare-kscldr
  FLARE Kernel Shellcode Loader
  ☆178Updated 6 years ago
• MythicAgents / hermes
  Swift 5 macOS agent
  ☆106Updated 11 months ago
• its-a-feature / macos_execute_from_memory
  PoC of macho loading from memory
  ☆57Updated 7 months ago
• cedowens / Spotlight-Enum-Kit
  JXA and swift code that can perform some macOS situational awareness without generating TCC prompts.
  ☆39Updated 3 years ago