Add files via upload

2023-05-16 23:55:10 -05:00
parent d8e2bca670
commit 872aa70808
1 changed files with 82 additions and 0 deletions
@@ -0,0 +1,82 @@
+REM macOS Security Testing and Reconnaissance Duckyscript (Local System)
+REM Unveiling the Depths of macOS Security  
+REM Comprehensive Testing and Advanced Reconnaissance Capabilities
+REM This Script pulls just about everything you would need to know about a target MAC
+
+REM Author: Narsty
+REM Title: SentinelStrike
+REM Target: MacOS 
+REM Version: 1.0
+REM Category: RECON
+
+
+DELAY 1000
+GUI SPACE
+DELAY 500
+STRING Terminal
+DELAY 500
+ENTER
+DELAY 500
+STRING clear
+ENTER
+DELAY 500
+STRING echo "Starting local system security testing and reconnaissance..."
+ENTER
+DELAY 1000
+
+REM Gather System Information
+STRING echo "----- System Information -----"
+ENTER
+STRING system_profiler SPHardwareDataType SPSoftwareDataType | grep -E "Model Identifier|Processor Name|Memory|Serial Number|OS Version" | sed 's/^\s*//'
+ENTER
+DELAY 1000
+
+REM Check for Suspicious Processes
+STRING echo "----- Suspicious Processes -----"
+ENTER
+STRING ps aux | grep -E "root|admin" | grep -v grep | awk '{print $2, $11}'
+ENTER
+DELAY 1000
+
+REM List Startup Items
+STRING echo "----- Startup Items -----"
+ENTER
+STRING ls -la /Library/LaunchAgents /Library/LaunchDaemons ~/Library/LaunchAgents
+ENTER
+DELAY 1000
+
+REM Check User Accounts
+STRING echo "----- User Accounts -----"
+ENTER
+STRING dscl . -list /Users | grep -v '_'
+ENTER
+DELAY 1000
+
+REM Find Sensitive Files
+STRING echo "----- Sensitive Files -----"
+ENTER
+STRING find ~ -type f \( -iname "*.key" -o -iname "*.pem" -o -iname "*.rsa" \) 2>/dev/null
+ENTER
+DELAY 1000
+
+REM Search for Sensitive Information
+STRING echo "----- Sensitive Information -----"
+ENTER
+STRING grep -r -i -I --include='*.txt' --include='*.doc*' --include='*.xls*' --include='*.csv' --include='*.json' --include='*.xml' --include='*.conf' --include='*.config' --include='*.properties' --include='*.ini' --include='*.env' --exclude-dir='.git' --exclude-dir='node_modules' "password\|username\|apikey\|secret" ~ 2>/dev/null
+ENTER
+DELAY 1000
+
+REM Check for Unsecured Files and Directories
+STRING echo "----- Unsecured Files and Directories -----"
+ENTER
+STRING find ~ -type d \( -iname "public" -o -iname "www" \) 2>/dev/null
+ENTER
+DELAY 1000
+
+REM Finished
+STRING echo "----- Security testing and reconnaissance completed! -----"
+ENTER
+
+
+
+