Awesome
macOSTools
macOS Offensive Tools
AUnit
Example XCode project for Audio Unit Plugins
MigrationToolPayload
Migration tool plugin
SpecialDelivery
Installer plugin
auth_plugin
Authentication Plugin
dylibinjection
Source code for dylib injection. Based off of code from Jonathan Levin http://newosxbook.com/src.jl?tree=listings&file=inject.c
HIDMan
IOHIDManager keylogger
Script Runners
jxa_runner
Rust library for in-memory JXA execution
Prerequisites
-
Mythic JXA Payload. Saved to disk
Build Steps
- Use the
PAYLOAD
andKEY
environment variables withcargo build
to generate the lib. KEY will be used as a static XOR key. PAYLOAD=apfell.js KEY=SOMEKEY cargo build --release
- Release build is in
target/release/libjxa_runner.dylib
- For debug versions, a log file is created in
/private/tmp/jxa_runner.log
- To test,
PAYLOAD=apfell.js KEY=SOMEKEY cargo test
python_runner
Rust library for in-memory Python execution
Prerequisites
-
Python Payload. Saved to disk
Build Steps
- Use the
PAYLOAD
andKEY
environment variables withcargo build
to generate the lib. KEY will be used as a static XOR key. PAYLOAD=medusa.py KEY=SOMEKEY cargo build --release
- Release build is in
target/release/libpython_runner.dylib
- For debug versions, a log file is created in
/private/tmp/python_runner.log
- To test,
PAYLOAD=script.py KEY=SOMEKEY cargo test