iiinova — where your digital self keeps evolving

We are preparing an optional MCP server for the next version of MacroPack, ShellcodePack, and DarwinOps! This interface will come in addition to the existing CLI and GUI for our customers who want to integrate redteam tooling with agentic AI! 🤖 #redteam

032

BallisKit @balliskit.bsky.social · 29/09/2026

Need to pivot through a macOS target during a Red Team operation? 🍎 Mirage C2 includes built-in SOCKS proxying, letting operators route traffic through a compromised Mac and reach resources beyond the initial foothold. Start it. Pivot. Keep moving. Part of DarwinOps by BallisKit. #RedTeam #macOS

031

BallisKit @balliskit.bsky.social · 18/09/2026

Introducing Mirage C2 🥷 — our new modular, in-memory macOS implant for DarwinOps. Shell, SOCKS proxy, secret extraction + private techniques for process injection, privilege escalation, TCC bypass & persistence. The full macOS attack chain, from initial access to post-exploitation. #redteam

032

BallisKit @balliskit.bsky.social · 18/08/2026

The new BallisKit tool soon to be released, an advanced macOS Mythic implant! All modular, in memory execution, includes private methods for process injection, TCC bypass, secret grabbing, persistance, malware behavior emulation, EDR Evasion, socks proxy, and more! #redteam #mirage

041

BallisKit @balliskit.bsky.social · 15/04/2026

New DarwinOps release! We mainly added more EDR Evasion profiles and improved JXA escape with the ability to generate a Macho/Dylib that does not use Osascript (or OSAKit) . This prevents detection of any Osascript EST events! #redteam

011

BallisKit @balliskit.bsky.social · 03/02/2026

MacroPack new version is out! 🥳 With improved EDR evasion profiles and all kind of ready to use initial access formats and scenario! Also now everything can be leveraged with the new BallisKit GUI! 😎 #redteam

011

BallisKit @balliskit.bsky.social · 19/11/2025

We are preparing a new version of ShellcodePack! -> Automated and improved DLL sideloading/proxying capacity -> AppDomain injection -> New Responsive GUI! -> Many more new features And of course up to date EDR evasion :) #shellcodepack

021

BallisKit @balliskit.bsky.social · 14/10/2025

MacroPack v2.8.7 is out! New GUI & updated EDR evasion! New features include Advanced LNK spoofing, expanded .NET obfuscation, and ML-evasion. For authorized red-team use! #RedTeam #offensivesecurity

032

BallisKit @balliskit.bsky.social · 24/09/2025

The next version of MacroPack is going to be huge! A new GUI, updated EDR bypass profiles, new evasion options, and many other things :) #redteam

011

BallisKit @balliskit.bsky.social · 08/09/2025

ShellcodePack 2.7.5 is now available! It includes updated bypass profiles for major EDRs We also improved: - ML detection evasion - ETW Patch - CallStack Spoofing ShellcodePack can be used to weaponize any raw shellcode or PE including DotNET, Go, and Rust :) #redteam

031

BallisKit @balliskit.bsky.social · 14/08/2025

Initial Access on MacOS made easy ! DarwinOps now supports DMG phishing profiles! Those are on shelf realistic templates with Gatekeeper bypass techniques :) This version also introduce a binary injection vulnerability scanner for MacOS! #redteam

021

BallisKit @balliskit.bsky.social · 01/08/2025

MacOS DMG phishing templates are coming in the next DarwinOps release! Ready to use, configurable, and with new GateKeeper bypass strategies! #redteam

021

BallisKit @balliskit.bsky.social · 27/05/2025

A new version of MacroPack Pro with improved DotNET obfuscator, new shellcode launcher, improved clickonce, and more will be released soon! Also, after Sliver, we a preparing tutorials with Mythic Apollo and Havoc 😎 #redteam

041

BallisKit @balliskit.bsky.social · 03/04/2025

For us, EDR bypass is not just a buzzword. MacroPack, ShellcodePack, and DarwinOps all come with bypass presets for major EDRs and Antivirus Those presets are regularly updated and tested! If you want to see a demo or an equivalent screenshot for the major EDRs contact us ! #redteam

032

BallisKit @balliskit.bsky.social · 03/03/2025

Obfuscate SharpHound? It's now possible with MacroPack. An version of MacroPack Pro was just released to improve our DotNET obfuscator! We now support packages build with tools like Costura! We tested we could obfuscate SharpHound, KrbRelay, and Mythic Apollo agent

021

BallisKit @balliskit.bsky.social · 07/02/2025

Did you know ShellcodePack can be used to pack and weaponize third party exe, dll, .NET in addition to raw shellcodes? Example with Mimikatz! #redteam

021

BallisKit @balliskit.bsky.social · 16/01/2025

Need initial access payloads for MacOS? Need help to bypass EDR on MacOS? Need undetected persistance on MacOS? Say no more and contact us about DarwinOps Our redteam ToolKit dedicated to MacOS! #redteam

021

BallisKit @balliskit.bsky.social · 04/12/2024

BK Tip: MacroPack LNK generator supports multiple methods to launch payloads including dropping files, download-exec, run shellcode directly in memory! The LNK may be crafted use different lolbins and scripts polyglot properties! And yes, we tested on EDRs. #redteam

032