Credential Access
6 binaries with this tactic
log
Access system log messages from Apple Unified Logging (AUL).
Defense EvasionCredential Access requires-rootbashzsh
osascript
Execute AppleScripts and other OSA language scripts and commands.
CollectionCredential AccessDiscovery +4 clipboardbashoneliner +15
pbpaste
Paste the contents of clipboard to the terminal.
Credential AccessCollection bashoneliner
security
Interact with Keychain, macOS's built-in password manager.
Credential AccessDefense Evasion bashchromecertificate
sqlite3
Query and manage sqlite databases.
DiscoveryCollectionCredential Access permissionsonelinercookie-theft
textutil
Manipulate text files in various formats.
Defense EvasionCollectionCredential Access bashonelinerpbpaste +1