GithubHelp home page GithubHelp logo

infosecb / loobins Goto Github PK

View Code? Open in Web Editor NEW
403.0 10.0 57.0 318 KB

Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" macOS binaries and how they can be used by threat actors for malicious purposes.

Home Page: https://loobins.io

License: GNU General Public License v3.0

Python 90.67% Jinja 9.33%
blueteam cybersecurity detection dfir redteam living-off-the-land macos loobins

loobins's Introduction

Senior Threat Detection Engineer

I am a cybersecurity professional with over a decade of experience in various technical leadership roles specializing in incident response, security operations, threat detection engineering, and security automation. I received a B.Sc. in Computer Networking and Information Security and a M.Sc. in Cybersecurity Operations from Champlain College.

When I’m not busy behind the keyboard, you’ll find me riding bikes, skiing, traveling, and spending time with family and friends.

loobins's People

Contributors

0v3rride avatar bobby-tablez avatar cedowens avatar cyberbuff avatar d00mfist avatar defenderdaniel avatar ethan-nay avatar ezaspy avatar infosecb avatar jatrost avatar jcarullo avatar markmorow avatar megancarney avatar pinarsadioglu avatar pratinavchandra avatar res260 avatar shellcromancer avatar texasbe2trill avatar will03 avatar yo-yo-yo-jbo avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

loobins's Issues

Add LOOBin for curl

LOOBin description

Can probably just copy-paste from Windows \ Linux LOLBINs FWIW

Add LOOBin for SetFile

LOOBin description

/usr/bin/SetFile is a tool to set the file attributes on files in an HFS+ directory.

Add method to LOOBin class to export STIX Package

  • Export LOOBin binary as STIX Tool
  • Export Functions as STIX Attack Patterns
  • Export Detections as STIX Course of Action
  • Create relationships between the above objects
  • Bundle the objects list above as a STIX package

Add LOOBin for open

LOOBin description

Used in many macOS things, including past sandbox escapes.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.