Mystikal is a macOS Initial Access Payload Generator that allows users to generate payloads for initial access on macOS systems. It provides a convenient way to create payloads for penetration testing and red teaming exercises. The tool is designed to be user-friendly and easy to use, with a simple interface for generating payloads. It supports various payload types and can be customized to meet specific needs. Mystikal is a valuable tool for security professionals and researchers who need to test the security of macOS systems and identify vulnerabilities.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A specification/framework for extending default C2 communication channels in Cobalt Strike
Insights on Red Teaming for Pacific Rim CCDC 2016 competition, focusing on preparation, operations plan, and automation.
A tool for generating .NET serialized gadgets for triggering .NET assembly load/execution.
A powerful tool for extracting passwords and performing various Windows security operations.
Charlotte is an undetected C++ shellcode launcher for executing shellcode with stealth.
Performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.
A collection of Python scripts for password spraying attacks against Lync/S4B & OWA, featuring Atomizer, Vaporizer, Aerosol, and Spindrift tools.
Emulate offensive attack techniques in the cloud with a self-contained Go binary.
MITRE Caldera™ is a cybersecurity platform that automates adversary emulation and supports red team operations through a modular framework built on MITRE ATT&CK.
PINNED

Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.