corpus.blog
43,228 blogs · 5,519,570 posts Claim your blog
Record · corpus.blog/posts/01a087be-8719-7396-a325-4f824b0b9f36

Decompiling run-only AppleScripts

pberba.github.io · published 14 December 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at pberba.github.io Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
28
Words captured
6,727

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://github.com/pberba/applescript-decompiler
github.com
https://www.sentinelone.com/blog/how-offensive-actors-use-applescript-for-attacking-macos/
sentinelone.com
https://redcanary.com/blog/threat-detection/applescript/
redcanary.com
https://www.microsoft.com/en-us/security/blog/2025/09/25/xcsset-evolves-again-analyzing-the-latest-updates-to-xcssets-inventory/
microsoft.com
https://www.microsoft.com/en-us/security/blog/2025/03/11/new-xcsset-malware-adds-new-obfuscation-persistence-techniques-to-infect-xcode-projects/
microsoft.com
https://www.sentinelone.com/labs/fade-dead-adventures-in-reversing-malicious-run-only-applescripts/
sentinelone.com
https://www.sentinelone.com/blog/macos-payloads-7-prevalent-and-emerging-obfuscation-techniques/
sentinelone.com
https://github.com/Jinmo/applescript-disassembler
github.com
https://github.com/SentineLabs/aevt_decompile
github.com
https://taomm.org/vol1/pdfs/CH%204%20Nonbinary%20Analysis.pdf
taomm.org
https://documents.trendmicro.com/assets/pdf/XCSSET_Technical_Brief.pdf
documents.trendmicro.com
https://www.sentinelone.com/blog/xcsset-malware-update-macos-threat-actors-prepare-for-life-without-python/
sentinelone.com
https://www.virustotal.com/gui/file/386473424d583678a01ba88d12831e17d496eae2fcabf857d8db2cefa338555d/
virustotal.com
https://www.virustotal.com/gui/file/d5fb4f6a77305f8ce5c9a214c4d66448ae2bd087f9eb32e8bd30585adecca2df/
virustotal.com
https://www.virustotal.com/gui/file/c17565f148d8ab216220474c1210b4a86ee110e2e73215220951261605fe8c60/
virustotal.com
https://www.virustotal.com/gui/file/af08a32040ac41bfdc1ff6b9ddd1ea75b9df649a3890e515303493a31fa3396f
virustotal.com
https://www.virustotal.com/gui/file/18351d6df1ae9c4f9b48835266981ce614f7b6ce7b41d5178d3af8974679b1c7
virustotal.com
https://www.virustotal.com/gui/file/f3bc158619b2aad17def966f0ac8dddc2107e4911a7c488d358d906f27ac2a2b/
virustotal.com
https://www.virustotal.com/gui/file/d5fb4f6a77305f8ce5c9a214c4d66448ae2bd087f9eb32e8bd30585adecca2df/details
virustotal.com
https://github.com/objective-see/Malware/blob/main/OSAMiner.zip
github.com
https://www.virustotal.com/gui/file/c6dae9481354466531c186421dda521cbedc72c0bf32ba8d49f6eee2cbf2477f/
virustotal.com
https://www.virustotal.com/gui/file/2f5307d9e0d56baf454cd96c0dfa19e5eab9d2d5843b359220d73d396f4135e9
virustotal.com
https://developer.apple.com/library/archive/documentation/AppleScript/Conceptual/AppleScriptLangGuide/conceptual/ASLR_about_handlers.html
developer.apple.com
https://github.com/JXA-userland/JXA/tree/4ad161a3ee56eb7e3e406ad20e9a19f0343132da/packages/%40jxa/types/tools/sdefs
github.com
https://github.com/JXA-userland/JXA/blob/4ad161a3ee56eb7e3e406ad20e9a19f0343132da/packages/%40jxa/types/tools/sdefs/StandardAdditions.sdef
github.com
https://developer.apple.com/library/archive/releasenotes/AppleScript/ASTerminology_AppleEventCodes/TermsAndCodes.html
developer.apple.com
https://applescriptlibrary.wordpress.com/wp-content/uploads/2013/11/apple-events-programming-guide.pdf
applescriptlibrary.wordpress.com
https://github.com/JXA-userland/JXA
github.com
Elsewhere on pberba.github.io (1)