macos-tools.md

opensource-macos-tools

A collection of open source MacOS tools

Collections

Monitoring

• objective-see/sniffMK - sniff mouse and keyboard events
• droe/xnumon - monitor macOS for malicious activity
• google/santa - A binary whitelisting/blacklisting system for Mac OS X
• didi/kemon - An Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring

XPC

• XPoCe - XPC Snooping utilties for MacOS and iOS (version 2.0)

Persistence

• xorrior/OSX/evilAuthPlugin - 假的认证插件，可以记录密码、创建线程加载后门

Uncategorized

• hexploitable/MEMSCAN - A memory scanning tool which uses mach_vm* to either dump memory or look for a specific sequence of bytes
• plamoni/SiriProxy - A (tampering) proxy server for Apple's Siri
• shinh/maloader - mach-o loader for linux