actae0n

electron-probe. Electron-Probe leverages the Node variant of the Chrome Debugging Protocol to execute JavaScript payloads inside of target Electron applications. This allows an attacker to extract secrets and manipulate the application as part of their post-exploitation workflow.

bn-chained-fixups. This plugin will apply the rebasing and binding information present in LC_DYLD_CHAINED_FIXUPS for ARM Mach-O files.

SysctlHunter. XNU Sysctl Hunter is a tool for analyzing Kexts that will automatically identify, type, and tag sysctl OIDs, as well as correct the prototypes of their OID handler functions. It contains a Binary Ninja plugin action, as well as a headless script for batch processing.

BundleLoader. BundleLoader demonstrates how to load a mach-o bundle from memory, and call a function from it. This can be useful for creating module systems for malware on Mac OS X. NOTE: THIS METHOD IS NO LONGER FILELESS ON UPDATED MACOS. Dyld writes files loaded using the OS provided APIs to tmp, then calls the file based loaders on them now.

procksy. Basic MITM proxy leveraging goproxy that will dump client requests to STDOUT

CVE-2022-26711. Integer overflow in Apple ImageIO WebP parsing (macOS/iOS)

py-code-mode. Let agents write Python with tools as SDKs. When they solve something, they save it as a skill. Next time, one call instead of multi-step reasoning.

bun-unpack. Extract original source files from Bun-compiled executables

pipl. Golang package created for interfacing with the Pipl search API

opencode-preload-rce. PoC: arbitrary code execution via bunfig.toml preload when running opencode in attacker-controlled directories

slarf. Go

celebi. Hands-on x86_64 Linux ELF emulator in Rust on Unicorn Engine. Implements a targeted subset of Linux syscalls plus TLS/auxv setup to run small statically-linked musl programs.

opencode-lifecycle-rce. OpenCode RCE via .opencode/package.json lifecycle scripts

atom-of-thought. Atom of Thought reasoning for Claude Agent SDK

claude-tcc-bypass. TCC bypass in Claude Desktop for macOS via Chromium remote debugging