Alternatives and similar repositories for macos-popups

Users that are interested in macos-popups are comparing it to the libraries listed below

• cedowens / macOS-browserhist-parser

  View on GitHub
  Swift code to parse the quarantine history database, Chrome history database, Safari history database, and Firefox history database on ma…
  ☆15Dec 3, 2020Updated 5 years ago
• its-a-feature / loginItemManipulator

  View on GitHub
  ☆15May 26, 2021Updated 4 years ago
• its-a-feature / macOSCameraCapture

  View on GitHub
  Simple CLI utility to save off an image from every webcam hooked into a mac
  ☆14May 20, 2021Updated 4 years ago
• bradleyjkemp / threathunting

  View on GitHub
  Assorted, MIT licensed, threat hunting rules from @bradleyjkemp
  ☆14Mar 11, 2022Updated 3 years ago
• xorrior / apfell-chrome-extension-c2server

  View on GitHub
  Apfell C2 Server for the Google Chrome Extension Payload
  ☆12Aug 12, 2020Updated 5 years ago
• puffyCid / macos-loginitems

  View on GitHub
  A library to parse macOS LoginItems
  ☆18Aug 28, 2022Updated 3 years ago
• antman1p / JXA_Proc_Tree

  View on GitHub
  A JXA script for enumerating running processes, printed out in a json, parent-child tree.
  ☆14Jan 28, 2022Updated 4 years ago
• antman1p / PrintTCCdb

  View on GitHub
  JXA script for Mythic that prints the TCC.db
  ☆15Apr 18, 2021Updated 4 years ago
• its-a-feature / HealthInspector

  View on GitHub
  JXA situational awareness helper by simply reading specific files on a filesystem
  ☆82Feb 18, 2022Updated 3 years ago
• cedowens / JXA-RemoveQuarantine

  View on GitHub
  JXA script based on research by Jeff Johnson on leveraging TextEdit to remove quarantine attributes on files. Jeff's original research is…
  ☆17Jan 31, 2021Updated 5 years ago
• cedowens / Spotlight-Enum-Kit

  View on GitHub
  JXA and swift code that can perform some macOS situational awareness without generating TCC prompts.
  ☆40Apr 20, 2022Updated 3 years ago
• cedowens / JXA-Runner

  View on GitHub
  Swift code to programmatically execute local or hosted JXA payloads from Terminal without using the on-disk osascript binary.
  ☆23Apr 22, 2021Updated 4 years ago
• threatsimgpt-AI / ThreatSimGPT

  View on GitHub
  ☆536Feb 3, 2026Updated last week
• its-a-feature / macos_execute_from_memory

  View on GitHub
  PoC of macho loading from memory
  ☆58Nov 18, 2024Updated last year
• ahhh / macOS_profiles

  View on GitHub
  a collection of profiles for macOS designed for penetration testing or red teaming
  ☆38Apr 15, 2019Updated 6 years ago
• slyd0g / SwiftParseTCC

  View on GitHub
  Use "Full Disk Access" permissions to read the contents of TCC.db and display it in human-readable format
  ☆40Jul 27, 2021Updated 4 years ago
• its-a-feature / Red-Teaming-Toolkit

  View on GitHub
  A collection of open source and commercial tools that aid in red team operations.
  ☆13Jun 14, 2018Updated 7 years ago
• attactics / cslogwatch

  View on GitHub
  Cobalt Strike log state tracking, parsing, and storage
  ☆24Jul 18, 2019Updated 6 years ago
• its-a-feature / offensive_macos

  View on GitHub
  Tracking of offensive macOS tooling, blogs, and related helpful information
  ☆192Nov 18, 2024Updated last year
• CCob / PwnyForm

  View on GitHub
  ☆48Nov 18, 2020Updated 5 years ago
• joshfaust / Windows_Hunt

  View on GitHub
  Analyze Windows Systems for common and unique vulnerabilities
  ☆10Jul 6, 2022Updated 3 years ago
• its-a-feature / LockSmith

  View on GitHub
  ObjectiveC CLI tool for interacting with macOS Keychain
  ☆82Oct 10, 2022Updated 3 years ago
• knightswd / SamrSearch

  View on GitHub
  SamrSearch can get user info and group info with MS-SAMR.
  ☆15Feb 15, 2022Updated 4 years ago
• curi0usJack / psfire

  View on GitHub
  simple demo of using C# & System.Management.Automation.dll to run powershell code (b64 encoded) without powershell.exe
  ☆14Mar 29, 2017Updated 8 years ago
• cedowens / Mythic-Macro-Generator

  View on GitHub
  Python3 script to generate a macro to launch a Mythic payload. Author: Cedric Owens
  ☆48Apr 15, 2021Updated 4 years ago
• magisterquis / nwrat

  View on GitHub
  Barebones RAT which provides a shell over TLS
  ☆12Apr 10, 2021Updated 4 years ago
• MythicMeta / Mythic_External_Agent

  View on GitHub
  Template repo for hooking 3rd party agents into Mythic while hosting them on external GitHub Repos
  ☆51Nov 18, 2024Updated last year
• cedowens / Persistent-Swift

  View on GitHub
  A Swift port of some of the original PersistentJXA projects by D00MFist. Original PersistentJXA repo: https://github.com/D00MFist/Persist…
  ☆34Apr 15, 2021Updated 4 years ago
• asaurusrex / Forblaze

  View on GitHub
  Forblaze - A Python Mac Steganography Payload Generator
  ☆56Mar 7, 2022Updated 3 years ago
• x0reaxeax / Fetch-n-Exec

  View on GitHub
  An x64 binary executing code that's not inside of it.
  ☆17Feb 28, 2023Updated 2 years ago
• slyd0g / SwiftSpy

  View on GitHub
  macOS keylogger, clipboard monitor, and screenshotter
  ☆91Sep 1, 2021Updated 4 years ago
• xorrior / poseidon

  View on GitHub
  Apfell Golang macOS/Linux/Windows implant
  ☆90Jul 31, 2021Updated 4 years ago
• PinkNoize / shelf-loader-poc

  View on GitHub
  ☆12Dec 2, 2021Updated 4 years ago
• audibleblink / ino

  View on GitHub
  In 'n Out - See what goes in and comes out of PEs
  ☆35May 12, 2022Updated 3 years ago
• mitre / unfetter-mediawiki-vagrant

  View on GitHub
  A virtual MediaWiki development environment, built on Vagrant, VirtualBox, and Puppet.
  ☆16Dec 1, 2016Updated 9 years ago
• jordanpotti / rt-reading

  View on GitHub
  List of Red Team Resources
  ☆17Jun 16, 2020Updated 5 years ago
• voxpupuli / puppet-misp

  View on GitHub
  This module installs and configures MISP (Malware Information Sharing Platform)
  ☆14Dec 29, 2025Updated last month
• mattreduce / eddie

  View on GitHub
  Eddie Vetter - triage macOS applications for security research
  ☆16May 24, 2021Updated 4 years ago
• audibleblink / kh

  View on GitHub
  Keyhack - Golang API token/webhook validator
  ☆16Mar 20, 2025Updated 10 months ago