https://github.com/xorrior/macOSTools

macOS Offensive Tools
https://github.com/xorrior/macOSTools

Last synced: 22 days ago
JSON representation

macOS Offensive Tools

• Host: GitHub
• URL: https://github.com/xorrior/macOSTools
• Owner: xorrior
• License: bsd-3-clause
• Created: 2020-06-18T07:36:44.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2023-09-28T14:03:07.000Z (about 1 year ago)
• Last Synced: 2024-08-05T17:29:42.174Z (4 months ago)
• Language: Objective-C
• Size: 45.6 MB
• Stars: 257
• Watchers: 13
• Forks: 30
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-hacking-lists - xorrior/macOSTools - macOS Offensive Tools (Objective-C)

README

        
# macOSTools

macOS Offensive Tools

### AUnit

Example XCode project for Audio Unit Plugins

### MigrationToolPayload

Migration tool plugin

### SpecialDelivery

Installer plugin

### auth_plugin

Authentication Plugin

### dylibinjection

Source code for dylib injection. Based off of code from Jonathan Levin http://newosxbook.com/src.jl?tree=listings&file=inject.c

### HIDMan

IOHIDManager keylogger

### Script Runners

### jxa_runner

Rust library for in-memory JXA execution

Prerequisites

1. [Rust](https://www.rust-lang.org/tools/install)

2. Mythic JXA Payload. Saved to disk

Build Steps

1. Use the `PAYLOAD` and `KEY` environment variables with `cargo build` to generate the lib. KEY will be used as a static XOR key.

2. `PAYLOAD=apfell.js KEY=SOMEKEY cargo build --release`

3. Release build is in `target/release/libjxa_runner.dylib`

4. For debug versions, a log file is created in `/private/tmp/jxa_runner.log`

5. To test, `PAYLOAD=apfell.js KEY=SOMEKEY cargo test`

### python_runner

Rust library for in-memory Python execution

Prerequisites

1. [Rust](https://www.rust-lang.org/tools/install)

2. Python Payload. Saved to disk

Build Steps

1. Use the `PAYLOAD` and `KEY` environment variables with `cargo build` to generate the lib. KEY will be used as a static XOR key.

2. `PAYLOAD=medusa.py KEY=SOMEKEY cargo build --release`

3. Release build is in `target/release/libpython_runner.dylib`

4. For debug versions, a log file is created in `/private/tmp/python_runner.log`

5. To test, `PAYLOAD=script.py KEY=SOMEKEY cargo test`