Marten4n6/EvilOSX

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

2415 stars · 488 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

EvilOSX is a Remote Administration Tool (RAT) for macOS/OS X written in pure Python, with a server providing both GUI and CLI interfaces and an extendable module system. It supports encrypted payloads, persistence, and post-exploitation modules such as credential retrieval, screenshots, microphone recording, and privilege escalation attempts.

Use cases

• demonstrate macOS post-exploitation techniques in a pentest
• build a reverse shell payload for macOS targets
• retrieve browser passwords and iCloud tokens during an authorized assessment
• record microphone audio or capture webcam screenshots from a compromised Mac
• test macOS endpoint detection against RAT behavior
• learn how RATs and encrypted C2 channels work

When to choose

• you are doing authorized penetration testing or red teaming on macOS
• you need an educational example of RAT architecture and module systems
• you want a pure-Python payload with no bot-side dependencies

When to avoid

• you need a maintained or supported tool - the project is no longer active
• you want a general-purpose legitimate remote administration solution
• using it against systems without explicit authorization is illegal

Facets

application · maturity abandoned

security penetration-testing cli gui security penetration-testing operating-systems python cli rat remote-administration-tool post-exploitation reverse-shell backdoor macos pentesting python3

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Marten4n6/EvilOSX")