Bella

Bella Bella is a pure python post-exploitation data mining tool & remote administration tool for macOS. 🍎 💻 What is it? Bella is a robust, pure python, post-exploitation and remote administration tool for macOS. Bella a.k.a. the server is an SSL/TLS encrypted reverse shell that can be dropped on...

CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV

Executive summary macOS Music and TV do an insecure rename resulting in FDA by gaining full control over the user's TCC.db I reported this bug in separate tickets for each app, feel free to merge if applicable. The underlying problem is that these apps have FDA but fail to sanitize their file...

CVE-2024-55504

CVE-2024-55504 An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via the exploitcombined.dylib component on MacOS Reproduce From Terminal root@kitploit:...

CVE-2016-1734

The patch is not in AppleUSBNetworking.kext like the security advisory suggested https://support.apple.com/en-ca/HT206166. root@kitploit: /CVE-2016-1734 md5sum ./10.11.1/AppleUSBNetworking.kext/Contents/MacOS/AppleUSBNetworking.c ./10.11.5/AppleUSBNetworking.kext/Contents/MacOS/AppleUSBNetworking...

DigiTrack

DigiTrack En 30 segundos, este ataque puede aprender a qué redes se ha conectado una computadora MacOS anteriormente, y plantar un script que rastrea la dirección IP actual y la red Wi-Fi cada 60 segundos. Ahora incluye: Hardtracker - Digispark anulador de VPN para enviar la dirección IP y el...

ssl-kill-switch2

SSL Kill Switch 2 Blackbox tool to disable SSL/TLS certificate validation - including certificate pinning - within iOS and macOS applications. Second iteration of https://github.com/iSECPartners/ios-ssl-kill-switch . Description Once loaded into an iOS or macOS application, SSL Kill Switch 2 will...

ssl-kill-switch2

SSL Kill Switch 2 Herramienta de caja negra para deshabilitar la validación de certificados SSL/TLS - incluido el anclaje de certificados certificate pinning - dentro de aplicaciones iOS y macOS. Segunda iteración de https://github.com/iSECPartners/ios-ssl-kill-switch . Descripción Una vez cargad...

Swift-Attack

Swift-Attack Pruebas unitarias para equipos azules para ayudar a construir detecciones para algunos métodos comunes de post-explotación en macOS. He incluido algunos ejemplos de post-explotación utilizando tanto el historial de línea de comandos como llamadas a la API. Los ejemplos de...

CVE-2023-32407-a-macOS-TCC-bypass-in-Metal

CVE-2023-32407-a-macOS-TCC-bypass-in-Metal...

XPEViewer

PE file viewer/editor for Windows, Linux and MacOS. Download: https://github.com/horsicq/XPEViewer/releases How to run: https://github.com/horsicq/XPEViewer/blob/master/docs/RUN.md How to build: https://github.com/horsicq/XPEViewer/blob/master/docs/BUILD.md Changelog:...

CVE-2024-23742

CVE-2024-23742 An issue in Loom through 0.196.1 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. With this tool, we can check if the App is Vulnerable: After validation, we can inject our code, and get a shell Enjoy Your She...

thief_raccoon

Thief Raccoon - Login Phishing Tool Thief Raccoon is a tool designed for educational purposes to demonstrate how phishing attacks can be conducted on various operating systems. This tool is intended to raise awareness about cybersecurity threats and help users understand the importance of securit...

boko

boko Application Hijack Scanner for macOS boko.py is an application scanner for macOS that searches for and identifies potential dylib hijacking and weak dylib vulnerabilities for application executables, as well as scripts an application may use that have the potential to be backdoored. The tool...

boko

boko Application Hijack Scanner for macOS boko.py 是一款 macOS 应用程序扫描器，用于搜索和识别应用可执行文件中潜在的 dylib 劫持和弱 dylib 漏洞，以及应用可能使用的、有被植入后门风险的脚本。该工具还会标记出有趣的文件并列出它们，无需手动浏览文件系统进行分析。借助主动发现功能，无需再猜测某个可执行文件是否容易受到 dylib 劫持攻击！ 创建此工具的原因是，我希望对 Dylib Hijack Scanner 发现的数据有更多控制。大多数公开可用的扫描器在发现第一个易受攻击的 dylib 后就会停止，而不会展开其余的...

CVE-2023-42829

CVE-2023-42829; 'An app may be able to access SSH passphrases' This document presents both an analysis of a logic vulnerability identified in the ssh binary on macOS my first software vulnerability!, and a patch analysis demonstrating how Apple fixed the vulnerability. I reported the issue Apple...

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

Mythic-Macro-Generator

Mythic-Macro-Generator Script en Python3 para generar macros de MS Office que lanzan payloads JXA de Mythic. Este script genera una macro de Office que usa osascript para descargar y ejecutar el payload JXA .js de Mythic. Pasos: 1. Configura el servidor C2 de Mythic y genera un payload "apfell" j...

macSubstrate

 macSubstrate - Substrato para macOS macSubstrate es una herramienta de plataforma para la inyección de código entre procesos en macOS, con una función similar a Cydia Substrate en iOS. Usando macSubstrate, puedes inyectar tus plugins .bundle o .framework en una app de macOS incluyendo apps en...

binlex

...

FinalShellDecodePass

FinalShellDecodePass Encryption/Decryption /Applications/FinalShell.app/Contents/Java/finalshell.jar!/myssh/O0O0OO0OOOO0OO0000O0O0O0000O00OOO0OOOOO00000OO0O0O0OOO00OOO0O00O000OOOO0OO00000O0OO0OOO00O0000OOOOOO.class The password field is in /Library/FinalShell/conn/xxxxxx/xxxxxxconnectconfig.json...