Tools

cyb3rmx/qu1cksc0pe

All-in-One malware analysis tool.

drduh/macos-security-and-privacy-guide

Curated macOS security and privacy guide with practical instructions for threat modeling, disk encryption, firewall configuration, secure…

iceman1001/chameleonmini-rebooted

Chameleon Mini revE rebooted - Iceman Fork, the ChameleonMini is a versatile contactless smartcard emulator (NFC/RFID)

nowsecure/fsmon

Filesystem monitor tool for Linux/Android iOS/macOS

rhinosecuritylabs/cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

cldrn/macphish

Generates malicious Office for Mac macros with beacon, credential harvesting, and meterpreter payloads for phishing and exploitation testing on macOS.

kavishgr/xmlrpc-bruteforcer

An XMLRPC brute forcer targeting Wordpress written in Python 3. (DISCONTINUED)

n1nj4sec/pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

owasp/zsc

OWASP ZSC - Shellcode/Obfuscate Code Generator https://www.secologist.com/

marten4n6/evilosx

An evil RAT (Remote Administration Tool) for macOS / OS X.

outflanknl/evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis…

securityftw/cs-suite

Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.

jeffzh3ng/fuxi

Cross-platform penetration testing platform with Docker support, web-based interface, and API for automated vulnerability scanning and security…

michalmalik/osx-re-101

A collection of resources for OSX/iOS reverse engineering.

raymondpittman/ipc-memory-mac-osx-exploit

CVE-2014-1322 - IPC Local Security Bypass | Mac OSX (Affected. >= 10.9.2)

ivanvza/arpy

Mac OSX ARP spoof (MiTM) tool that can also plug into Gource

tokyoneon/armor

Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.