ssl-kill-switch2

SSL Kill Switch 2 Herramienta de caja negra para deshabilitar la validación de certificados SSL/TLS - incluido el anclaje de certificados certificate pinning - dentro de aplicaciones iOS y macOS. Segunda iteración de https://github.com/iSECPartners/ios-ssl-kill-switch . Descripción Una vez cargad...

awesome-hex-editors

awesome-hex-editors 精选并扩展的十六进制编辑器资源列表，适用于 Windows、macOS 和 Linux。 十六进制编辑器 以下列出的所有程序都具备十六进制编辑器的基本功能，如查看、编辑和搜索。列表中高亮标签的数量并非排名。我仅希望帮助您选择符合需求的十六进制编辑器。 名称| 高亮标签| 平台| 界面| 许可证| 来源| 起始时间| 状态 ---|---|---|---|---|---|---|--- N Curses Hexedit| calculator| 🐧| TUI| GPL-2.0| 🇺🇸| 1998年8月| 🧊 010 Editor| bookmarks...

Swift-Attack

Swift-Attack Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods. I have included some post exploitation examples using both command line history and API calls. The post exploitation examples included here are not all encompassing. Instead the...

CVE-2023-32407-a-macOS-TCC-bypass-in-Metal

CVE-2023-32407-un-macOS-TCC-bypass-en-Metal...

procinfo

procinfo 一个适用于 Linux 和 macOS 的可移植进程检查工具。立即获取任何运行进程的详细信息！ 另见 procinfominimal.sh —— procinfo 的纯 sh 实现。 安装 root@kitploit: curl -fsSL https://raw.githubusercontent.com/wenekar/procinfo/main/procinfo.sh -o procinfo chmod +x procinfo sudo mv procinfo /usr/local/bin/ 或者直接复制脚本。它是一个 bash 脚本，除标准 Unix...

XPEViewer

Visor/editor de archivos PE para Windows, Linux y MacOS. Descarga: https://github.com/horsicq/XPEViewer/releases Cómo ejecutar: https://github.com/horsicq/XPEViewer/blob/master/docs/RUN.md Cómo compilar: https://github.com/horsicq/XPEViewer/blob/master/docs/BUILD.md Registro de cambios:...

machscope

MachScope 一个原生的 macOS 二进制分析工具，提供 Mach-O 解析、ARM64 反汇编和进程调试功能。完全使用 Swift 构建，零外部依赖。 功能特性 功能| 描述 ---|--- Mach-O 解析| 头部、段、节、符号、动态库、字符串 代码签名| Entitlements、CDHash、签名信息、Team ID ARM64 反汇编| 完整指令解码器，带 PAC 注释 进程调试| 附加、断点、内存、寄存器 Swift 库| 可嵌入到您自己的项目中 JSON 输出| 适合脚本处理的输出格式 为什么选择 MachScope？ 纯 Swift — 无依赖，易于构建和嵌入 ...

CVE-2024-23742

CVE-2024-23742 macOS 上 Loom 至 0.196.1 版本中的一个问题允许远程攻击者通过 RunAsNode 和 enableNodeClilnspectArguments 设置执行任意代码。 使用此工具，我们可以检查 App 是否存在漏洞： 验证后，我们可以注入我们的代码并获取一个 shell 享受你的 Shell :...

thief_raccoon

Thief Raccoon - Login Phishing Tool Thief Raccoon is a tool designed for educational purposes to demonstrate how phishing attacks can be conducted on various operating systems. This tool is intended to raise awareness about cybersecurity threats and help users understand the importance of securit...

boko

boko Application Hijack Scanner for macOS boko.py is an application scanner for macOS that searches for and identifies potential dylib hijacking and weak dylib vulnerabilities for application executables, as well as scripts an application may use that have the potential to be backdoored. The tool...

boko

boko Application Hijack Scanner for macOS boko.py 是一款 macOS 应用程序扫描器，用于搜索和识别应用可执行文件中潜在的 dylib 劫持和弱 dylib 漏洞，以及应用可能使用的、有被植入后门风险的脚本。该工具还会标记出有趣的文件并列出它们，无需手动浏览文件系统进行分析。借助主动发现功能，无需再猜测某个可执行文件是否容易受到 dylib 劫持攻击！ 创建此工具的原因是，我希望对 Dylib Hijack Scanner 发现的数据有更多控制。大多数公开可用的扫描器在发现第一个易受攻击的 dylib 后就会停止，而不会展开其余的...

CVE-2023-42829

CVE-2023-42829; 'Una aplicación podría acceder a las frases de contraseña SSH' Este documento presenta tanto un análisis de una vulnerabilidad lógica identificada en el binario ssh de macOS ¡mi primera vulnerabilidad de software!, como un análisis del parche que demuestra cómo Apple corrigió la...

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

macos_sandbox

Introducción a macOS: el sandbox de las Apps Continuando con mi serie de publicaciones sobre mi transición a macOS, me gustaría hablar un poco sobre el sandbox de Apps de macOS. Se recomienda encarecidamente leer primero la publicación macOS App structure: asumiré que el lector sabe la diferencia...

NeuroCore

NeuroCore Utilidad de análisis estructural de binarios y visualización de alto rendimiento Resumen NeuroCore es una utilidad nativa de macOS diseñada para el análisis estructural de datos binarios mediante visualización de alta velocidad. Al aprovechar la computación de propósito general en...

Mythic-Macro-Generator

Mythic-Macro-Generator Python3 script to generate MS Office macros for launching Mythic JXA payloads. This script generates an Office macro which uses osascript to download and execute the Mythic JXA .js payload. Steps: 1. Set up Mythic C2 server and generate an "apfell" jxa payload note: this...

installer

Overview Installation mql cnspec Scan your target platform Package Information Kubernetes Status Docker Containers: Homebrew: Install.sh: Install.ps1: macOS Pkg: Arch Linux: Installation The easiest way to install mql & cnspec is to use the install scripts. via Shell Script Linux and macOS...

macSubstrate

 macSubstrate - Substrate for macOS macSubstrate is a platform tool for interprocess code injection on macOS, with the similar function to Cydia Substrate on iOS. Using macSubstrate, you can inject your plugins .bundle or .framework into a mac app including sandboxed apps to tweak it in the...

binlex

...

FinalShellDecodePass

FinalShellDecodePass 加密解密 /Applications/FinalShell.app/Contents/Java/finalshell.jar!/myssh/O0O0OO0OOOO0OO0000O0O0O0000O00OOO0OOOOO00000OO0O0O0OOO00OOO0O00O000OOOO0OO00000O0OO0OOO00O0000OOOOOO.class password 字段在 /Library/FinalShell/conn/xxxxxx/xxxxxxconnectconfig.json 快速查找 root@kitploit: $...