its-a-feature / offensive_macosLinks
Tracking of offensive macOS tooling, blogs, and related helpful information
☆192Updated last year
Alternatives and similar repositories for offensive_macos
Users that are interested in offensive_macos are comparing it to the libraries listed below
Sorting:
- Swift 5 macOS agent☆113Updated last year
- JavaScript for Automation (JXA) macOS agent☆90Updated last week
- Objective-C library and console to interact with Heimdal APIs for macOS Kerberos☆153Updated 2 years ago
- macOS Initial Access Payload Generator☆322Updated 2 years ago
- Collection of macOS persistence methods and miscellaneous tools in JXA☆286Updated 2 years ago
- A macOS enumeration tool inspired by harmjoy's Windows-based Seatbelt enumeration tool. Author: Cedric Owens☆341Updated 3 years ago
- Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods.☆109Updated 3 years ago
- A proof of concept for a clickjacking attack on macOS.☆97Updated last year
- JXA and swift code that can perform some macOS situational awareness without generating TCC prompts.☆40Updated 3 years ago
- JXA situational awareness helper by simply reading specific files on a filesystem☆82Updated 3 years ago
- JavaScript for Automation (JXA) tool to do Active Directory enumeration.☆105Updated 3 years ago
- JXA implementation of some SwiftBelt functions. Author: Cedric Owens☆46Updated 2 years ago
- Payload designed for targeting Jamf enrolled devices.☆39Updated 2 years ago
- ObjectiveC CLI tool for interacting with macOS Keychain☆82Updated 3 years ago
- macOS persistence tool☆229Updated 4 years ago
- ☆99Updated 4 years ago
- Interact with Chromium-based browsers' debug port to view open tabs, installed extensions, and cookies☆190Updated 2 years ago
- macOS Offensive Tools☆271Updated 2 years ago
- Execute MachO binaries in memory using CGo☆79Updated 4 years ago
- A Red Team tool for exfiltrating sensitive data from Confluence pages.☆114Updated 2 years ago
- Freyja is a Golang, Purple Team agent that compiles into Windows, Linux and macOS x64 executables.☆62Updated last year
- Scripts (python3 and Swift) for macOS to recursively check /Applications and also check /usr/local/bin, /usr/bin, and /usr/sbin for binar…☆98Updated 3 years ago
- ☆121Updated last month
- LDAP Querying without the Suck☆110Updated last year
- Slackhound allows red and blue teams to perform fast reconnaissance on Slack workspaces/organizations to quickly search user profiles, lo…☆81Updated 6 months ago
- Objective C dylibHijackScanner and analysis tool☆38Updated 2 years ago
- Swift code to programmatically perform dylib injection☆52Updated 3 years ago
- This repository contains the technique presented at SOCON2025 for stealing cookies silently from MacOS Sequoia with only root privileges☆12Updated 10 months ago
- ☆190Updated last year
- Python3 script to generate a macro to launch a Mythic payload. Author: Cedric Owens☆48Updated 4 years ago