# Mystikal | Addressing The Pain Of macOS Initial Access Payloads

**URL:** <https://onehack.st/t/mystikal-addressing-the-pain-of-macos-initial-access-payloads/198989>\
**Category:** Tools & Scripts\
**Tags:** tools, hacking\
**Created:** [August 23, 2021, 9:24pm UTC](https://onehack.st/t/mystikal-addressing-the-pain-of-macos-initial-access-payloads/198989 "2021-08-23T21:24:12Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![PlayBoy83](https://onehack.st/user_avatar/onehack.st/playboy83/32/164314_2.png) [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Post date:** [August 23, 2021, 9:24pm UTC](https://onehack.st/t/mystikal-addressing-the-pain-of-macos-initial-access-payloads/198989/1 "2021-08-23T21:24:12Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/8/b/8bd071a1cf46c4ea36ce1d1e5920754571ea6222.jpeg)

# Mystikal

macOS Initial Access Payload Generator

Related Blog Post:

- [https://posts.specterops.io/introducing-mystikal-4fbd2f7ae520](https://posts.specterops.io/introducing-mystikal-4fbd2f7ae520)

## Usage:

1. Install Xcode on build machine (Required for Installer Package w/ Installer Plugin)
2. Install python requirements

```auto
sudo pip3 install -r requirements.txt

```

1. Change settings within the `Settings/MythicSettings.py` file to match your Mythic configs
2. Run mystikal

```auto
python3 mystikal.py

```

1. Select your desired payload from the options

```auto
 _________  ____ __
| | |.--.--.-----.| |_|__| |--.---.-.| |
| || | |__ --|| _| | <| _ || |
| __|_|__ || ___|_____ || ____|__ | __|__ | ___._||__ |
         | _____ |
         
Mystikal: macOS Payload Generator
Main Choice: Choose 1 of 8 choices
Choose 1 for Installer Packages
Choose 2 for Mobile Configuration: Chrome Extension
Choose 3 for Mobile Configuration: Webloc File
Choose 4 for Office Macros: VBA
Choose 5 for Office Macros: XLM Macros in SYLK Files
Choose 6 for Disk Images
Choose 7 for Armed PDFs
Choose 8 to exit

```

### Note:

Option 1, Option 1.4, and Option 4 have submenus shown below

```auto
Selected Installer Packages
SubMenu: Choose 1 of 5 choices
Choose 1 for Installer Package w/ only pre/postinstall scripts
Choose 2 for Installer Package w/ Launch Daemon for Persistence
Choose 3 for Installer Package w/ Installer Plugin
Choose 4 for Installer Package w/ JavaScript Functionality
Choose 5 to exit

Selected Installer Package w/ JavaScript Functionality
SubMenu Choice: Choose 1 of 3 choices
Choose 1 for Installer Package w/ JavaScript Functionality embedded
Choose 2 for Installer Package w/ JavaScript Functionality in Script
Choose 3 to exit

Selected Office Macros: VBA
SubMenu Choice: Choose 1 of 4 choices
Choose 1 for VBA Macros for Word
Choose 2 for VBA Macros for Excel
Choose 3 for VBA Macros for PowerPoint
Choose 4 to exit

```

### Behavior Modifications:

To change the execution behavior (which binaries are called upon payload execution)

- Modifications will be required in either the specific payload file under the `Modules` folder or the related template file under the `Templates` folder.

## GitHub:

> **[GitHub - D00MFist/Mystikal: macOS Initial Access Payload Generator](https://github.com/D00MFist/Mystikal)**
>
> macOS Initial Access Payload Generator