xspawn

xspawn xspawn starts a program on macOS through launchd and never execs that program itself. The aim is that an EDR records launchd as the parent, not this tool or the calling shell. by cenobyte [email protected] 2026 https://github.com/cenobyte-vincit/xspawn Summary xspawn opens...

xspawn macOS launchd Parent Spoofing Client

xspawn is a macOS process execution utility that submits programs directly to launchd through its private XPC bootstrap interface. Rather than executing the requested program itself, xspawn causes launchd to spawn the process through xpcproxy, resulting in Endpoint Security and EDR telemetry...