+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Malware and Viruses (https://hackforums.net/forumdisplay.php?fid=287)
+---- Thread: [NEW] OSX Malware/RAT (/showthread.php?tid=5802757)
[NEW] OSX Malware/RAT - [BLANK] - Feb 21, 2018
If you are interested in OSX malware, have a look at this new sample of EvilOSX that just appeared on VT.
1)Repo: https://github.com/Marten4n6/EvilOSX …
2)Source and decodes: https://ghostbin.com/paste/gugbj
3)Hash: 89e5b8208daf85f549d9b7df8e2a062e47f15a5b08462a4224f73c0a6223972a
A pure python, post-exploitation, RAT (Remote Administration Tool) for macOS / OSX.
Features
Emulate a simple terminal instance
Undetected by anti-virus (randomized hash, HTTPS communication)
Multi-threaded
No client dependencies (pure python)
Persistent
Simple extendable module system
Retrieve Chrome passwords
Retrieve iCloud tokens and contacts
Download and upload files
iTunes iOS backup enumeration
Retrieve browser history (Chrome and Safari)
Attempt to get root via local privilege escalation
Auto installer, simply run EvilOSX on your target and the rest is handled automatically
RE: [NEW] OSX Malware/RAT - CyberStrike - Feb 21, 2018
Great find I saw it yesterday objective-see was talking about it .. but most people here seem to like "java" rats for OSX nevermind that Safari blocks Java applets, maybe they have their target java -jar their rats.. I been saying between Metasploit/pupy/Python and BASH scripts I dunno why everyone is having such a hard time with OSX, seems that they secretly have not moved on to what works currently.
RE: [NEW] OSX Malware/RAT - general79 - Dec 22, 2019
(Feb 21, 2018 08:57 AM)[BLANK] Wrote: If you are interested in OSX malware, have a look at this new sample of EvilOSX that just appeared on VT.Does it work perfectly?
1)Repo: https://github.com/Marten4n6/EvilOSX …
2)Source and decodes: https://ghostbin.com/paste/gugbj
3)Hash: 89e5b8208daf85f549d9b7df8e2a062e47f15a5b08462a4224f73c0a6223972a
A pure python, post-exploitation, RAT (Remote Administration Tool) for macOS / OSX.
Features
Emulate a simple terminal instance
Undetected by anti-virus (randomized hash, HTTPS communication)
Multi-threaded
No client dependencies (pure python)
Persistent
Simple extendable module system
Retrieve Chrome passwords
Retrieve iCloud tokens and contacts
Download and upload files
iTunes iOS backup enumeration
Retrieve browser history (Chrome and Safari)
Attempt to get root via local privilege escalation
Auto installer, simply run EvilOSX on your target and the rest is handled automatically
RE: [NEW] OSX Malware/RAT - doomfish - Dec 22, 2019
Been looking for a OSX rat for a while,thanks fam.
RE: [NEW] OSX Malware/RAT - kayla_90 - Dec 24, 2019
Take a look at eggshell,maybe you ind it interesting.
https://github.com/neoneggplant/EggShell/
kayla