its-a-feature / offensive_macosLinks
Tracking of offensive macOS tooling, blogs, and related helpful information
☆190Updated last year
Alternatives and similar repositories for offensive_macos
Users that are interested in offensive_macos are comparing it to the libraries listed below
Sorting:
- Swift 5 macOS agent☆113Updated last year
- macOS Initial Access Payload Generator☆320Updated last year
- JavaScript for Automation (JXA) macOS agent☆88Updated 3 weeks ago
- Collection of macOS persistence methods and miscellaneous tools in JXA☆283Updated 2 years ago
- Objective-C library and console to interact with Heimdal APIs for macOS Kerberos☆151Updated 2 years ago
- Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods.☆109Updated 3 years ago
- A macOS enumeration tool inspired by harmjoy's Windows-based Seatbelt enumeration tool. Author: Cedric Owens☆339Updated 3 years ago
- macOS Offensive Tools☆271Updated 2 years ago
- A proof of concept for a clickjacking attack on macOS.☆95Updated last year
- JavaScript for Automation (JXA) tool to do Active Directory enumeration.☆105Updated 3 years ago
- macOS persistence tool☆228Updated 3 years ago
- JXA implementation of some SwiftBelt functions. Author: Cedric Owens☆46Updated 2 years ago
- JXA situational awareness helper by simply reading specific files on a filesystem☆81Updated 3 years ago
- ObjectiveC CLI tool for interacting with macOS Keychain☆81Updated 3 years ago
- ☆99Updated 4 years ago
- Interact with Chromium-based browsers' debug port to view open tabs, installed extensions, and cookies☆189Updated 2 years ago
- JXA and swift code that can perform some macOS situational awareness without generating TCC prompts.☆39Updated 3 years ago
- Payload designed for targeting Jamf enrolled devices.☆39Updated 2 years ago
- A Red Team tool for exfiltrating sensitive data from Confluence pages.☆113Updated 2 years ago
- List of Awesome macOS Red Teaming Resources.☆239Updated 3 years ago
- Execute MachO binaries in memory using CGo☆79Updated 4 years ago
- Red Team tool for exfiltrating files from a target's Google Drive that you have access to, via Google's API.☆58Updated 4 years ago
- A tool to find folders excluded from AV real-time scanning using a time oracle☆234Updated last year
- Slackhound allows red and blue teams to perform fast reconnaissance on Slack workspaces/organizations to quickly search user profiles, lo…☆81Updated 4 months ago
- Objective C dylibHijackScanner and analysis tool☆40Updated 2 years ago
- Uses Apple's MDM protocol to backdoor a device with a malicious profile.☆56Updated 4 years ago
- Freyja is a Golang, Purple Team agent that compiles into Windows, Linux and macOS x64 executables.☆62Updated last year
- SpecterOps Presentations☆209Updated last week
- Poseidon is a Golang agent targeting Linux and macOS☆186Updated 2 weeks ago
- This repository contains the technique presented at SOCON2025 for stealing cookies silently from MacOS Sequoia with only root privileges☆13Updated 8 months ago