Mystikal

macOS Initial Access Payload Generator

Usage:

Install Xcode on build machine (Required for Installer Package w/ Installer Plugin)
Install python requirements

sudo pip3 install -r requirements.txt

Change settings within the Settings/MythicSettings.py file to match your Mythic configs
Run mystikal

python3 mystikal.py

Select your desired payload from the options

 _______               __   __ __           __
|   |   |.--.--.-----.|  |_|__|  |--.---.-.|  |
|       ||  |  |__ --||   _|  |    <|  _  ||  |
|__|_|__||___  |_____||____|__|__|__|___._||__|
         |_____|
         
Mystikal: macOS Payload Generator
Main Choice: Choose 1 of 8 choices
Choose 1 for Installer Packages
Choose 2 for Mobile Configuration: Chrome Extension
Choose 3 for Mobile Configuration: Webloc File
Choose 4 for Office Macros: VBA
Choose 5 for Office Macros: XLM Macros in SYLK Files
Choose 6 for Disk Images
Choose 7 for Armed PDFs
Choose 8 to exit

Note:

Option 1, Option 1.4, and Option 4 have submenus shown below

Selected Installer Packages
SubMenu: Choose 1 of 5 choices
Choose 1 for Installer Package w/ only pre/postinstall scripts
Choose 2 for Installer Package w/ Launch Daemon for Persistence
Choose 3 for Installer Package w/ Installer Plugin
Choose 4 for Installer Package w/ JavaScript Functionality
Choose 5 to exit

Selected Installer Package w/ JavaScript Functionality
SubMenu Choice: Choose 1 of 3 choices
Choose 1 for Installer Package w/ JavaScript Functionality embedded
Choose 2 for Installer Package w/ JavaScript Functionality in Script
Choose 3 to exit

Selected Office Macros: VBA
SubMenu Choice: Choose 1 of 4 choices
Choose 1 for VBA Macros for Word
Choose 2 for VBA Macros for Excel
Choose 3 for VBA Macros for PowerPoint
Choose 4 to exit

Behavior Modifications:

To change the execution behavior (which binaries are called upon payload execution)

Modifications will be required in either the specific payload file under the Modules folder or the related template file under the Templates folder.

macOS Initial Access Payload Generator

Related tags

Overview

Mystikal

Usage:

Note:

Behavior Modifications:

Owner

Leo Pitt

Scan publicly accessible assets on your AWS cloud environment

OSINT Cybersecurity Tools

pwncat module that automatically exploits CVE-2021-4034 (pwnkit)

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

Hack any account sending fake nitro QR code (only for educational purpose)

Python tool for exploiting CVE-2021-35616

Port scanner tool with easy installation

Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found

Directory Traversal in Afterlogic webmail aurora and pro

CVE-2021-40346 integer overflow enables http smuggling

LinOTP - the open source solution for two factor authentication

A guide to building basic malware in Python by implementing a keylogger application

Domain abuse scanner covering domainsquatting and phishing keywords.

Dependency Combobulator is an Open-Source, modular and extensible framework to detect and prevent dependency confusion leakage and potential attacks.

Official repository for Pyew.

Auerswald COMpact 8.0B Backdoors exploit

A simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities

Exploiting CVE-2021-42278 and CVE-2021-42287

Local server for IDA Lumina feature