Alternatives and similar repositories for macOSTools

Users that are interested in macOSTools are comparing it to the libraries listed below

• D00MFist / PersistentJXA
  Collection of macOS persistence methods and miscellaneous tools in JXA
  ☆279Updated last year
• cedowens / MacShellSwift
  Proof of concept MacOS post exploitation tool written in Swift. Designed as a POC for blue teams to build macOS detections. Author: Cedri…
  ☆121Updated 4 years ago
• CyborgSecurity / PoisonApple
  macOS persistence tool
  ☆225Updated 3 years ago
• its-a-feature / bifrost
  Objective-C library and console to interact with Heimdal APIs for macOS Kerberos
  ☆150Updated last year
• D00MFist / Mystikal
  macOS Initial Access Payload Generator
  ☆312Updated last year
• cedowens / SwiftBelt
  A macOS enumeration tool inspired by harmjoy's Windows-based Seatbelt enumeration tool. Author: Cedric Owens
  ☆329Updated 3 years ago
• cedowens / Swift-Attack
  Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods.
  ☆107Updated 2 years ago
• XMCyber / MacHound
  ☆98Updated 4 years ago
• its-a-feature / offensive_macos
  Tracking of offensive macOS tooling, blogs, and related helpful information
  ☆176Updated 7 months ago
• tyranid / infosec-presentations
  A repository of previous info-sec presentations I've presented.
  ☆161Updated 7 months ago
• MRGEffitas / Ironsquirrel
  Encrypted exploit delivery for the masses
  ☆267Updated 5 years ago
• SpiderLabs / SCShell
  Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
  ☆113Updated 5 years ago
• dsnezhkov / zombieant
  Zombie Ant Farm: Primitives and Offensive Tooling for Linux EDR evasion.
  ☆225Updated 5 years ago
• two06 / Inception
  Provides In-memory compilation and reflective loading of C# apps for AV evasion.
  ☆370Updated last year
• Mr-Un1k0d3r / Shellcoding
  Shellcoding utilities
  ☆222Updated 4 years ago
• Mr-Un1k0d3r / PoisonHandler
  lateral movement techniques that can be used during red team exercises
  ☆273Updated 5 years ago
• cedowens / EntitlementCheck
  Scripts (python3 and Swift) for macOS to recursively check /Applications and also check /usr/local/bin, /usr/bin, and /usr/sbin for binar…
  ☆97Updated 2 years ago
• xorrior / poseidon
  Apfell Golang macOS/Linux/Windows implant
  ☆89Updated 3 years ago
• ChiChou / sploits
  PoC
  ☆209Updated 5 months ago
• breakpointHQ / TCC-ClickJacking
  A proof of concept for a clickjacking attack on macOS.
  ☆95Updated last year
• richiercyrus / Venator
  [⛔️ Deprecated] Venator is a python tool used to gather data for proactive detection of malicious activity on macOS devices.
  ☆177Updated 4 years ago
• FuzzySecurity / BlueHatIL-2020
  BlueHatIL 2020 - Staying # and Bringing Covert Injection Tradecraft to .NET
  ☆146Updated 5 years ago
• praetorian-inc / vulcan
  a tool to make it easy and fast to test various forms of injection
  ☆173Updated 6 years ago
• matterpreter / Shhmon
  Neutering Sysmon via driver unload
  ☆230Updated 2 years ago
• optiv / Dent
  A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.
  ☆297Updated last year
• MythicAgents / hermes
  Swift 5 macOS agent
  ☆106Updated 11 months ago
• BC-SECURITY / Invoke-PrintDemon
  This is a PowerShell Empire launcher PoC using PrintDemon and Faxhell.
  ☆202Updated 4 years ago
• arntsonl / calc_security_poc
  A sample of proof of concept scripts that run Calc.exe with full source code.
  ☆96Updated 9 months ago
• djhohnstein / macos_shell_memory
  Execute MachO binaries in memory using CGo
  ☆81Updated 4 years ago
• christophetd / spoofing-office-macro
  PoC of a VBA macro spawning a process with a spoofed parent and command line.
  ☆380Updated 5 years ago