Pinned Tweet
Need to red team macOS targets but don't know where to start?

Introducing Mirage C2 🥷! Our new modular, in-memory macOS implant for DarwinOps.

Shell, SOCKS proxy, credential & secret extraction, plus private techniques for process injection, privilege escalation, TCC bypass & persistess to post-exploitation and EDR evasion, BallisKit now brings the full attack chain to macOS.

#RedTeam #macOS
5
10
51
2,777
Recent attacks highlight how developers are prime targets!
Trojanized Homebrew installers, malicious VS Code extensions, compromised npm packages...
With BallisKit DarwinOps & MacroPack, red teams can emulate advanced payload delivery on macOS & Windows!

#RedTeam#RedTeamecurity
0
3
18
768
BallisKit retweeted
Need to disable any EDR in post exploitation? Here is a simple tutorial showing how to do that using BallisKit EDR Eclipse!
EDR Eclipse is also compatible with ShellcodePack and MacroPack formats as well as all major C2s!

blog.balliskit.com/tutorial-disab…

#redteam
0
28
139
9,087
New stealer emulation added in BallisKit Mirage C2 for macOS!
I’m testing a simulation module for the AMOS stealer (using ESF events and file usage patterns that are nearly identical to the actual stealer), it’s quite something to see that it still works on some hardened systems...
0
1
3
286
We are preparing an optional MCP server for the next version of MacroPack, ShellcodePack, and DarwinOps!
This interface will come in addition to the existing CLI and GUI for our customers who want to integrate redteam tooling with agentic AI! 🤖

#redteam
0
4
19
1,127
BallisKit retweeted
Need to automate payload creation and EDR Evasion for your RedTeam?
The new version of MacroPack is available!
Ready to use EDR evasion, private .NET obfuscator, and initial access !
We also started to integrate exploits for vulnerabilities abused in the wild to improve acity!

#redteam
1
7
28
2,053
BallisKit retweeted
Need to red team macOS targets but don't know where to start?

Introducing Mirage C2 🥷! Our new modular, in-memory macOS implant for DarwinOps.

Shell, SOCKS proxy, credential & secret extraction, plus private techniques for process injection, privilege escalation, TCC bypass & persistess to post-exploitation and EDR evasion, BallisKit now brings the full attack chain to macOS.

#RedTeam #macOS
5
10
51
2,777
Need to disable any EDR in post exploitation? Here is a simple tutorial showing how to do that using BallisKit EDR Eclipse!
EDR Eclipse is also compatible with ShellcodePack and MacroPack formats as well as all major C2s!

blog.balliskit.com/tutorial-disab…

#redteam
0
28
139
9,087
Need to pivot through a macOS target during a Red Team operation? 🍎
Mirage C2 includes built-in SOCKS proxying, letting operators route traffic through a compromised Mac and reach resources beyond the initial foothold.
Start it. Pivot. Keep moving.
Part of DarwinOps by cOS
0
6
19
1,064
RT @BallisKit: Learn how to Weaponize Adaptix C2 with MacroPack and ShellcodePack!
-> EXE and DLL Sideloading examples
-> LNK spoofing PD…
0
23
0
Need to automate payload creation and EDR Evasion for your RedTeam?
The new version of MacroPack is available!
Ready to use EDR evasion, private .NET obfuscator, and initial access !
We also started to integrate exploits for vulnerabilities abused in the wild to improve acity!

#redteam
1
7
28
2,053
The new BallisKit tool soon to be released, an advanced macOS Mythic implant!
All modular, in memory execution, includes private methods for process injection, TCC bypass, secret grabbing, persistance, malware behavior emulation, EDR Evasion, socks proxy, and more!

#redteam #miragen
1
8
34
2,176
RT @EmericNasi: I was thinking maybe releasing a zero day smartscreen bypass with the next version of MacroPack Pro!
Only to a limited nb…
0
5
0
17
BallisKit retweeted
I've noticed that @bunjavascript has been gaining a lot of traction lately, so I thought it might be interesting to take a look at its offensive potential 🕵️

The game is evolving and we have now entered a new post-exploitation era made of Virtual Machines and Interpreters. Let's revive some old techniques using modern tools ♻️

blog.atsika.ninja/posts/byoi-tru…
0
24
51
4,569
Learn how to Weaponize Adaptix C2 with MacroPack and ShellcodePack!
-> EXE and DLL Sideloading examples
-> LNK spoofing PDF, HTA, Clickonce, etc.
-> EDR Evasion options

#redteam

blog.balliskit.com/tutorial-adapt…
0
23
126
9,071
Did you know macOS Office macro are still a thing?
Use the latest DarwinOps to generate a Word/Excel payload to load Sliver and Poseidon C2 and act as a Socks Proxy!

#redteam

blog.balliskit.com/what-if-word-e…
0
9
21
2,008
ShellcodePack just got even better with V2.8.3!

Turn shellcode, PE files (.NET, Go, Rust, C/C++), and third-party tooling into deployment-ready payloads with advanced weaponization, multiple output formats, built-in EDR evasion capabilities, and seamless integration with your favorite C2 frameworks.

Less time preparing. More time executing.

Learn more: balliskit.com/products/shell…
1
12
93
5,012