0xSojalSec / MB-CyberSecurity-Toolset

Mac Cybersecurity toolset + configuration list for Bug Hunting, Security Research, CTFs. etc

MAC hacking toolset + configs

This list of toolsets and configs is created to act as a reference for a custom Macbook setup for Hacking and other stuff.

1. Burp Suite Community + Extensions:

   • Content Type Converter
   • JSON Web Tokens
   • Turbo Intruder
   • Autorize

2. Android Studio:

   • Emulator setup for Android Pentesting

3. VMware Fusion Pro:

   • For Win11 VM

4. Mozilla Firefox + Extensions:

   • Foxyproxy
   • User-Agent Switcher
   • Shodan

5. Tor Browser

6. Homebrew

Installed using Mac OS's softwareupdate utility

7. Xcode Dev Tools
8. Rosetta 2

Installed using Homebrew

9. arduino-ide
10. git
11. db-browser-for-sqlite
12. jq
13. pup
14. hexedit
15. apktool
16. ngrok
17. sublime-text
18. nmap
19. wget
20. ncat
21. wireshark
22. node
23. go
24. twine-pypi
25. rustup
26. pyenv
27. ffuf
28. sqlmap
29. name-that-hash
30. exploitdb
31. binwalk
32. exiftool
33. wpscan
34. radare2
35. john-jumbo
36. gau
37. hydra
38. inetutils
39. foremost
40. volatility (volatility3)
41. bettercap
42. aircrack-ng
43. subfinder
44. sshuttle
45. httpx
46. dnsx
47. hcxtools
48. findomain
49. crunch
50. amass
51. naabu
52. dalfox
53. openjdk (java - with symlink for system)
54. virtualenv
55. ghidra
56. samba
57. pipx
58. openvpn
59. rbenv
60. ruby-build
61. socat
62. mosquitto
63. xpdf (for pdfinfo)
64. freerdp (for xfreerdp)
65. php
66. binutil-$arch (using homebrew recipe from binutils github repository - binutils)
67. vim (the default installation of vim on mac os does not have syntax highlighting enabled)
68. awscli
69. android-platform-tools (for adb)
70. feroxbuster
71. gobuster
72. upx
73. htop
74. dex2jar
75. jadx
76. redis
77. nikto
78. hashcat
79. rlwrap
80. powershell
81. ilspy
82. mhash (lib)
83. mcrypt (lib)
84. jpeg (lib)
85. qbittorrent
86. macfuse
87. automake
88. binutils
89. coreutils
90. zbar (for zbarimg)
91. rar
92. visual-studio-code
93. gnupg
94. cmake
95. make
96. zeek
97. cadaver
98. rclone
99. audacity
100. cutter (cask version)
101. dotnet
102. idafree
103. crackpkcs (crackpkcs12)
104. metasploit
105. reaver
106. mysql
107. dive
108. rectangle
109. docker-desktop
110. mkvtoolnix
111. unix2dos (automatically installs the other counterparts - unix2mac, mac2unix, dos2unix)
112. knock
113. chisel-tunnel

Installed using Go

114. assetfinder
115. waybackurls
116. gf
117. kerbrute
118. subjack
119. hack-browser-data

Installed using pipx (custom source location - /opt/pipx_custom_source/)

1. crackmapexec (using the official repository source at CrackMapExec)
2. impacket
3. stegoveritas
4. git-dumper
5. oletools
6. hashid
7. bevigil-cli
8. enum4linux-ng (using tar.gz archive at enum4linux-ng)
9. flask-unsign
10. updog
11. stegpy
12. pyrdp-mitm (full pyrdp suite)

Installed using pyenv

13. python 3.11.5, 3.8.10, and 2.7.18

Installed using rbenv

14. ruby 3.3.0 using rbenv

Installed using rbenv's ruby (3.3.0) gem

15. zsteg
16. evil-winrm

Installed using pyenv's python 3.11.5 PIP

17. PyExifTool
18. impacket
19. pycryptodome
20. unicorn (built using source from official github - Unicorn)
21. pwntools
22. lxml
23. scapy
24. asn1crypto (dependency for pyrdp)

Installed using pyenv's python 3.8.10 PIP

25. uncompyle6

Installed at /usr/local/bin

26. pycdc and pycdas (built from source - pycdc)
27. ext4fuse (built from source - ext4fuse)
28. outguess (built from source - outguess)
29. steghide (built from source - steghide and steghide-osx)
30. cewl (CeWL)
31. npiet and npietedit (npiet)
32. isteg (iSteg)

Custom files

33. All Kali Linux wordlists
34. Seclists
35. All Kali Linux webshells
36. /opt/homebrew/etc/smb.conf (from Kali Linux latest version 2023.3)
37. /opt/homebrew/etc/foremost.conf (from Kali Linux latest version 2023.3)