🍎AppleScript Collection ->
Living off the Orchard: Apple Script
A comprehensive database documenting how AppleScript and JXA are leveraged by threat actors for malicious purposes.
2
Script Types
29
ATT&CK Techniques
52
Scripts
Script Database
Explore our curated collection of 52 scripts
| Elevation | TCC | |||
|---|---|---|---|---|
T1005 | Copy Apple Notes database | AppleScript | ||
T1010 | Find all running applications which currently have a window | AppleScript | ||
T1016.001 | Test Internet connection | AppleScript | ||
T1018 | Read local hosts file | AppleScript | ||
T1033 | Get user (using System Info) | AppleScript | ||
T1033 | Get user (using environment variable) | AppleScript | ||
T1033 | Get user (using list folder) | AppleScript | ||
T1033 | Get user information (using System Events JXA) | JavaScript | ||
T1056.002 | Display dialog box to capture user password | AppleScript | ||
T1057 | Get all processes | AppleScript |