[[BLANK]]

If you are interested in OSX malware, have a look at this new sample of EvilOSX that just appeared on VT.

1)Repo: https://github.com/Marten4n6/EvilOSX …
2)Source and decodes: https://ghostbin.com/paste/gugbj  
3)Hash: 89e5b8208daf85f549d9b7df8e2a062e47f15a5b08462a4224f73c0a6223972a

A pure python, post-exploitation, RAT (Remote Administration Tool) for macOS / OSX.

Features

   Emulate a simple terminal instance
   Undetected by anti-virus (randomized hash, HTTPS communication)
   Multi-threaded
   No client dependencies (pure python)
   Persistent
   Simple extendable module system
   Retrieve Chrome passwords
   Retrieve iCloud tokens and contacts
   Download and upload files
   iTunes iOS backup enumeration
   Retrieve browser history (Chrome and Safari)
   Attempt to get root via local privilege escalation
   Auto installer, simply run EvilOSX on your target and the rest is handled automatically

[CyberStrike]

Great find I saw it yesterday objective-see was talking about it .. but most people here seem to like "java" rats for OSX nevermind that Safari blocks Java applets, maybe they have their target java -jar their rats.. I been saying between Metasploit/pupy/Python and BASH scripts I dunno why everyone is having such a hard time with OSX, seems that they secretly have not moved on to what works currently.

[general79]

If you are interested in OSX malware, have a look at this new sample of EvilOSX that just appeared on VT.

1)Repo: https://github.com/Marten4n6/EvilOSX …
2)Source and decodes: https://ghostbin.com/paste/gugbj  
3)Hash: 89e5b8208daf85f549d9b7df8e2a062e47f15a5b08462a4224f73c0a6223972a

A pure python, post-exploitation, RAT (Remote Administration Tool) for macOS / OSX.

Features

   Emulate a simple terminal instance
   Undetected by anti-virus (randomized hash, HTTPS communication)
   Multi-threaded
   No client dependencies (pure python)
   Persistent
   Simple extendable module system
   Retrieve Chrome passwords
   Retrieve iCloud tokens and contacts
   Download and upload files
   iTunes iOS backup enumeration
   Retrieve browser history (Chrome and Safari)
   Attempt to get root via local privilege escalation
   Auto installer, simply run EvilOSX on your target and the rest is handled automatically

Does it work perfectly?

[doomfish]

Been looking for a OSX rat for a while,thanks fam.

[kayla_90]

Take a look at eggshell,maybe you ind it interesting.
https://github.com/neoneggplant/EggShell/
kayla