Pinned Tweet
Need to red team macOS targets but don't know where to start?
Introducing Mirage C2 🥷! Our new modular, in-memory macOS implant for DarwinOps.
Shell, SOCKS proxy, credential & secret extraction, plus private techniques for process injection, privilege escalation, TCC bypass & persistence.
From initial access to post-exploitation and EDR evasion, BallisKit now brings the full attack chain to macOS.
#RedTeam #macOS
BallisKit retweeted
Need to automate payload creation and EDR Evasion for your RedTeam?
The new version of MacroPack is available!
Ready to use EDR evasion, private .NET obfuscator, and initial access !
We also started to integrate exploits for vulnerabilities abused in the wild to improve adversary emulation capacity!
#redteam
BallisKit retweeted
Need to red team macOS targets but don't know where to start?
Introducing Mirage C2 🥷! Our new modular, in-memory macOS implant for DarwinOps.
Shell, SOCKS proxy, credential & secret extraction, plus private techniques for process injection, privilege escalation, TCC bypass & persistence.
From initial access to post-exploitation and EDR evasion, BallisKit now brings the full attack chain to macOS.
#RedTeam #macOS
Need to disable any EDR in post exploitation? Here is a simple tutorial showing how to do that using BallisKit EDR Eclipse!
EDR Eclipse is also compatible with ShellcodePack and MacroPack formats as well as all major C2s!
blog.balliskit.com/tutorial-…
#redteam
BallisKit retweeted
Learn how to Weaponize Adaptix C2 with MacroPack and ShellcodePack!
-> EXE and DLL Sideloading examples
-> LNK spoofing PDF, HTA, Clickonce, etc.
-> EDR Evasion options
#redteam
blog.balliskit.com/tutorial-…
Need to automate payload creation and EDR Evasion for your RedTeam?
The new version of MacroPack is available!
Ready to use EDR evasion, private .NET obfuscator, and initial access !
We also started to integrate exploits for vulnerabilities abused in the wild to improve adversary emulation capacity!
#redteam
BallisKit retweeted
I was thinking maybe releasing a zero day smartscreen bypass with the next version of MacroPack Pro!
Only to a limited nb of customers amongst those who bought multiple licenses.
What do you think about that?
82%Do It!
18%Do not do it!
0%Other
17 votes • Final results BallisKit retweeted
I've noticed that @bunjavascript has been gaining a lot of traction lately, so I thought it might be interesting to take a look at its offensive potential 🕵️
The game is evolving and we have now entered a new post-exploitation era made of Virtual Machines and Interpreters. Let's revive some old techniques using modern tools ♻️
blog.atsika.ninja/posts/byoi…
Learn how to Weaponize Adaptix C2 with MacroPack and ShellcodePack!
-> EXE and DLL Sideloading examples
-> LNK spoofing PDF, HTA, Clickonce, etc.
-> EDR Evasion options
#redteam
blog.balliskit.com/tutorial-…
Did you know macOS Office macro are still a thing?
Use the latest DarwinOps to generate a Word/Excel payload to load Sliver and Poseidon C2 and act as a Socks Proxy!
#redteam
blog.balliskit.com/what-if-w…
ShellcodePack just got even better with V2.8.3!
Turn shellcode, PE files (.NET, Go, Rust, C/C++), and third-party tooling into deployment-ready payloads with advanced weaponization, multiple output formats, built-in EDR evasion capabilities, and seamless integration with your favorite C2 frameworks.
Less time preparing. More time executing.
Learn more: balliskit.com/products/shell…
BallisKit retweeted
BallisKit retweeted
I will be at the "LeHack" conference in Paris with the @BallisKit team end of the week!
Ping me if you want to have a chat!