Alternatives and similar repositories for SwiftBelt

Users that are interested in SwiftBelt are comparing it to the libraries listed below

• D00MFist / PersistentJXA
  Collection of macOS persistence methods and miscellaneous tools in JXA
  ☆274Updated last year
• D00MFist / Mystikal
  macOS Initial Access Payload Generator
  ☆305Updated last year
• CyborgSecurity / PoisonApple
  macOS persistence tool
  ☆224Updated 3 years ago
• its-a-feature / bifrost
  Objective-C library and console to interact with Heimdal APIs for macOS Kerberos
  ☆148Updated last year
• its-a-feature / offensive_macos
  Tracking of offensive macOS tooling, blogs, and related helpful information
  ☆167Updated 5 months ago
• xorrior / macOSTools
  macOS Offensive Tools
  ☆266Updated last year
• MythicAgents / hermes
  Swift 5 macOS agent
  ☆106Updated 9 months ago
• cedowens / MacShellSwift
  Proof of concept MacOS post exploitation tool written in Swift. Designed as a POC for blue teams to build macOS detections. Author: Cedri…
  ☆121Updated 4 years ago
• cedowens / Swift-Attack
  Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods.
  ☆107Updated 2 years ago
• cedowens / EntitlementCheck
  Scripts (python3 and Swift) for macOS to recursively check /Applications and also check /usr/local/bin, /usr/bin, and /usr/sbin for binar…
  ☆97Updated 2 years ago
• XMCyber / MacHound
  ☆98Updated 4 years ago
• infosecB / LOOBins
  Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" ma…
  ☆461Updated 5 months ago
• its-a-feature / HealthInspector
  JXA situational awareness helper by simply reading specific files on a filesystem
  ☆77Updated 3 years ago
• its-a-feature / LockSmith
  ObjectiveC CLI tool for interacting with macOS Keychain
  ☆78Updated 2 years ago
• richiercyrus / Venator-Swift
  Swift Command line tool used for proactive detection of malicious activity on macOS systems.
  ☆68Updated 4 years ago
• MythicAgents / typhon
  Payload designed for targeting Jamf enrolled devices.
  ☆38Updated last year
• its-a-feature / Orchard
  JavaScript for Automation (JXA) tool to do Active Directory enumeration.
  ☆103Updated 3 years ago
• redteaminfra / redteam-infra
  ☆114Updated last month
• slyd0g / WhiteChocolateMacademiaNut
  Interact with Chromium-based browsers' debug port to view open tabs, installed extensions, and cookies
  ☆171Updated 2 years ago
• breakpointHQ / TCC-ClickJacking
  A proof of concept for a clickjacking attack on macOS.
  ☆95Updated last year
• MythicAgents / apfell
  JavaScript for Automation (JXA) macOS agent
  ☆78Updated 3 weeks ago
• nicoleibrahim / DSStoreParser
  macOS .DS_Store Parser
  ☆66Updated 3 years ago
• tonghuaroot / Awesome-macOS-Red-Teaming
  List of Awesome macOS Red Teaming Resources.
  ☆230Updated 3 years ago
• nccgroup / Carnivore
  Tool for assessing on-premises Microsoft servers authentication such as ADFS, Skype, Exchange, and RDWeb
  ☆145Updated 4 years ago
• richiercyrus / Venator
  [⛔️ Deprecated] Venator is a python tool used to gather data for proactive detection of malicious activity on macOS devices.
  ☆177Updated 4 years ago
• t94j0 / satellite
  easy-to-use payload hosting
  ☆270Updated 3 years ago
• xforcered / StandIn
  StandIn is a small .NET35/45 AD post-exploitation toolkit
  ☆256Updated 3 years ago
• themittenmac / TrueTree
  A command line tool for pstree-like output on macOS with additional pid capturing capabilities
  ☆254Updated 8 months ago
• djhohnstein / macos_shell_memory
  Execute MachO binaries in memory using CGo
  ☆81Updated 3 years ago
• ahhh / Cybersecurity-Tradecraft
  A repo to support the book
  ☆108Updated 3 years ago