Alternatives and similar repositories for SwiftBelt:

Users that are interested in SwiftBelt are comparing it to the libraries listed below

• D00MFist / PersistentJXA
  Collection of macOS persistence methods and miscellaneous tools in JXA
  ☆269Updated last year
• xorrior / macOSTools
  macOS Offensive Tools
  ☆265Updated last year
• D00MFist / Mystikal
  macOS Initial Access Payload Generator
  ☆303Updated last year
• CyborgSecurity / PoisonApple
  macOS persistence tool
  ☆222Updated 3 years ago
• its-a-feature / bifrost
  Objective-C library and console to interact with Heimdal APIs for macOS Kerberos
  ☆146Updated last year
• cedowens / EntitlementCheck
  Scripts (python3 and Swift) for macOS to recursively check /Applications and also check /usr/local/bin, /usr/bin, and /usr/sbin for binar…
  ☆95Updated 2 years ago
• its-a-feature / offensive_macos
  Tracking of offensive macOS tooling, blogs, and related helpful information
  ☆161Updated 3 months ago
• cedowens / MacShellSwift
  Proof of concept MacOS post exploitation tool written in Swift. Designed as a POC for blue teams to build macOS detections. Author: Cedri…
  ☆120Updated 4 years ago
• MythicAgents / hermes
  Swift 5 macOS agent
  ☆101Updated 7 months ago
• cedowens / Swift-Attack
  Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods.
  ☆106Updated 2 years ago
• XMCyber / MacHound
  ☆99Updated 4 years ago
• infosecB / LOOBins
  Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" ma…
  ☆455Updated 3 months ago
• richiercyrus / Venator-Swift
  Swift Command line tool used for proactive detection of malicious activity on macOS systems.
  ☆68Updated 4 years ago
• its-a-feature / HealthInspector
  JXA situational awareness helper by simply reading specific files on a filesystem
  ☆75Updated 3 years ago
• its-a-feature / LockSmith
  ObjectiveC CLI tool for interacting with macOS Keychain
  ☆77Updated 2 years ago
• r3ggi / NoMADCredentialsStealer
  https://wojciechregula.blog/post/macos-red-teaming-get-ad-credentials-from-nomad/
  ☆40Updated 3 years ago
• slyd0g / WhiteChocolateMacademiaNut
  Interact with Chromium-based browsers' debug port to view open tabs, installed extensions, and cookies
  ☆166Updated last year
• breakpointHQ / TCC-ClickJacking
  A proof of concept for a clickjacking attack on macOS.
  ☆94Updated last year
• MythicAgents / typhon
  Payload designed for targeting Jamf enrolled devices.
  ☆37Updated last year
• ashirt-ops / ashirt-server
  Adversary Simulators High-Fidelity Intelligence and Reporting Toolkit
  ☆162Updated last week
• djhohnstein / macos_shell_memory
  Execute MachO binaries in memory using CGo
  ☆79Updated 3 years ago
• guidepointsecurity / RedCommander
  Red Team C2 Infrastructure built in AWS using Ansible!
  ☆225Updated 4 years ago
• bananabr / TimeException
  A tool to find folders excluded from AV real-time scanning using a time oracle
  ☆232Updated last year
• Ben0xA / HoneyCreds
  HoneyCreds network credential injection to detect responder and other network poisoners.
  ☆216Updated 3 years ago
• nicoleibrahim / DSStoreParser
  macOS .DS_Store Parser
  ☆66Updated 3 years ago
• tyranid / infosec-presentations
  A repository of previous info-sec presentations I've presented.
  ☆159Updated 4 months ago
• latortuga71 / TortugaToolKit
  Collection of some of my own tools with other great open source tools out there packaged into a powershell module
  ☆143Updated 2 years ago
• MythicAgents / orthrus
  Uses Apple's MDM protocol to backdoor a device with a malicious profile.
  ☆52Updated 3 years ago
• REW-sploit / REW-sploit
  Emulate and Dissect MSF and *other* attacks
  ☆140Updated last year
• nccgroup / Carnivore
  Tool for assessing on-premises Microsoft servers authentication such as ADFS, Skype, Exchange, and RDWeb
  ☆145Updated 4 years ago