cedowens / SwiftBelt-JXA
JXA implementation of some SwiftBelt functions. Author: Cedric Owens
☆42Updated last year
Alternatives and similar repositories for SwiftBelt-JXA:
Users that are interested in SwiftBelt-JXA are comparing it to the libraries listed below
- JXA and swift code that can perform some macOS situational awareness without generating TCC prompts.☆38Updated 2 years ago
- Python3 script to generate a macro to launch a Mythic payload. Author: Cedric Owens☆46Updated 3 years ago
- PoC of macho loading from memory☆53Updated 2 months ago
- Objective C dylibHijackScanner and analysis tool☆37Updated last year
- A JXA script for enumerating running processes, printed out in a json, parent-child tree.☆13Updated 3 years ago
- If you have any questions, please open an issue.☆24Updated 2 years ago
- JXA script based on research by Jeff Johnson on leveraging TextEdit to remove quarantine attributes on files. Jeff's original research is…☆17Updated 4 years ago
- ☆15Updated 2 years ago
- JXA script to allow programmatic persistence via macOS Calendar.app alerts.☆41Updated 4 years ago
- Zoom Persistence Aggressor and Handler☆54Updated 3 years ago
- Tool to download, install, and run macOS capable command & control servers (i.e., C2s with macOS payloads/clients) as docker containers f…☆18Updated 4 years ago
- ☆38Updated 2 years ago
- Discover DYLD_INSERT_LIBRARIES hijacks on macOS☆44Updated 2 years ago
- Swift code to run a dylib on disk☆15Updated 2 years ago
- macOS shellcode loader written in Objective-C☆47Updated 2 years ago
- ☆31Updated 3 years ago
- ☆15Updated 3 years ago
- ☆36Updated 3 years ago
- A C# tool to send emails through Outlook from the command line or in memory☆30Updated 4 years ago
- A cloud automation system for Red Teams based on Terraform and Ansible☆24Updated 3 years ago
- ☆24Updated 3 years ago
- Freyja is a Golang, Purple Team agent that compiles into Windows, Linux and macOS x64 executables.☆42Updated 3 months ago
- D/Invoke port of UrbanBishop☆29Updated 4 years ago
- JXA script for Mythic that prints the TCC.db☆15Updated 3 years ago
- Timestomping module: overwrite file create/modify times in .NET (no pinvoke)☆24Updated 3 years ago
- Automated deployment and configuration of a Mythic server using Terraform and Ansible☆9Updated last year
- A simple Toolkit to BF and decrypt Windows EntraId CacheData☆13Updated 7 months ago
- Enumerate Location Services using CoreLocation API on macOS☆18Updated 3 years ago
- A simple proof of concept for detecting use of Cobalt Strike's execute-assembly☆59Updated 2 years ago
- Ansible playbooks for instrumenting a Red Team environment with RedElk☆47Updated 4 years ago