Alternatives and similar repositories for SwiftBelt:

Users that are interested in SwiftBelt are comparing it to the libraries listed below

• D00MFist / PersistentJXA
  Collection of macOS persistence methods and miscellaneous tools in JXA
  ☆268Updated last year
• CyborgSecurity / PoisonApple
  macOS persistence tool
  ☆221Updated 3 years ago
• its-a-feature / bifrost
  Objective-C library and console to interact with Heimdal APIs for macOS Kerberos
  ☆144Updated last year
• xorrior / macOSTools
  macOS Offensive Tools
  ☆265Updated last year
• its-a-feature / offensive_macos
  Tracking of offensive macOS tooling, blogs, and related helpful information
  ☆157Updated 2 months ago
• D00MFist / Mystikal
  macOS Initial Access Payload Generator
  ☆299Updated last year
• cedowens / MacShellSwift
  Proof of concept MacOS post exploitation tool written in Swift. Designed as a POC for blue teams to build macOS detections. Author: Cedri…
  ☆119Updated 4 years ago
• cedowens / Swift-Attack
  Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods.
  ☆106Updated 2 years ago
• cedowens / EntitlementCheck
  Scripts (python3 and Swift) for macOS to recursively check /Applications and also check /usr/local/bin, /usr/bin, and /usr/sbin for binar…
  ☆93Updated 2 years ago
• MythicAgents / hermes
  Swift 5 macOS agent
  ☆102Updated 6 months ago
• its-a-feature / HealthInspector
  JXA situational awareness helper by simply reading specific files on a filesystem
  ☆73Updated 2 years ago
• XMCyber / MacHound
  ☆99Updated 4 years ago
• infosecB / LOOBins
  Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" ma…
  ☆453Updated 2 months ago
• nicoleibrahim / DSStoreParser
  macOS .DS_Store Parser
  ☆66Updated 3 years ago
• MythicAgents / typhon
  Payload designed for targeting Jamf enrolled devices.
  ☆37Updated last year
• its-a-feature / LockSmith
  ObjectiveC CLI tool for interacting with macOS Keychain
  ☆77Updated 2 years ago
• richiercyrus / Venator-Swift
  Swift Command line tool used for proactive detection of malicious activity on macOS systems.
  ☆68Updated 4 years ago
• slyd0g / WhiteChocolateMacademiaNut
  Interact with Chromium-based browsers' debug port to view open tabs, installed extensions, and cookies
  ☆165Updated last year
• its-a-feature / Orchard
  JavaScript for Automation (JXA) tool to do Active Directory enumeration.
  ☆100Updated 2 years ago
• WithSecureLabs / Jamf-Attack-Toolkit
  Suite of tools to facilitate attacks against the Jamf macOS management platform.
  ☆180Updated 4 years ago
• cedowens / Spotlight-Enum-Kit
  JXA and swift code that can perform some macOS situational awareness without generating TCC prompts.
  ☆38Updated 2 years ago
• breakpointHQ / TCC-ClickJacking
  A proof of concept for a clickjacking attack on macOS.
  ☆94Updated last year
• Verizon / redshell
  An interactive command prompt for red teaming and pentesting. Automatically pushes commands through SOCKS4/5 proxies via proxychains. Opt…
  ☆211Updated 2 years ago
• Ben0xA / HoneyCreds
  HoneyCreds network credential injection to detect responder and other network poisoners.
  ☆216Updated 3 years ago
• shellster / LDAPPER
  LDAP Querying without the Suck
  ☆98Updated 3 months ago
• djhohnstein / macos_shell_memory
  Execute MachO binaries in memory using CGo
  ☆79Updated 3 years ago
• ahhh / Cybersecurity-Tradecraft
  A repo to support the book
  ☆106Updated 3 years ago
• Allevon412 / TeamsImplant
  ☆204Updated 2 years ago
• Immersive-Labs-Sec / msrc-api
  A collection of tools to interact with Microsoft Security Response Center API
  ☆95Updated last year
• gremwell / o365enum
  Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover v1, or office.com login page.
  ☆255Updated 9 months ago