LOOBins
Living Off the Orchard: macOS Binaries
A curated list of macOS built-in binaries that can be used by threat actors for post-exploitation activities.
68
Binaries
14
Tactics
216
Use Cases
Recently Added
diskutil
Enumerate, mount, erase and manipulate local disks, APFS containers and volumes.
ldapsearch
Query LDAP and Active Directory servers for directory objects and attributes.
pbcopy
Write standard input into the macOS pasteboard (clipboard).
pmset
Read and modify macOS power management settings, including scheduled wake/power-on events.
trash
Move files and directories into the user's Trash folder from the command line without invoking rm or unlink.
killall
Kill processes by name.