BallisKit

MacroPack new version is out! 🥳 With improved EDR evasion profiles and all kind of ready to use initial access formats and scenario! Also now everything can be leveraged with the new BallisKit GUI! 😎 #redteam

BallisKit ShellcodePack 2.8.1 is out! Focus: AppDomain injection & DLL sideloading, plus updated EDR evasion profiles! Learn how to backdoor .NET apps with our appdomain injection tutorial: blog.balliskit.com/appdomain-inje… #redteam

The next ShellcodePack version supports AppDomain injection payloads! We also simplified and improved DLL sideloading/proxying and updated the EDR bypass profiles. Sideload anything with a few clicks! 😎 #redteam

Using #darwinOps, after setting up your redteam scenario, you can choose which phishing template will be most convincing for your engagement 😎 Contact us to know more about redteaming on macOS and ready to use phishing templates! #redteam

MacroPack new version is out! 🥳 With improved EDR evasion profiles and all kind of ready to use initial access formats and scenario! Also now everything can be leveraged with the new BallisKit GUI! 😎 #redteam

Hanging out with friends is also why we go to conf :) I had a great experience as a speaker at @hackcon Will definitively come back!

@EmericNasi @Oddvarmoe @hackcon

@redteamcore It's not EntryPoint, it's related to EvasionPack, an internal tool we use to find way to break EDR parsers.

@BallisKit EP？EntryPoint Patch is really a good idea. I have done something similar on my own RTO platform.🙃

**OFFICIAL** EDR Tier List for 2026! Based on nothing but the people in chat, vibes, guests, opinions and limited experience. Thanks to @EmericNasi @ShitSecure @_JohnHammond and @domchell for jumping in a guests to help me out this time around!

👋Starting 2026 by updating my EDR tier list 🥳Going live on Twitch/YouTube Sunday at 20:00 CEST! Counting on you all to be there for some fun banter 🤡 Aslo AI gave me chad jaw line 😂

DarwinOps just leveled up 🚀 Now supports AppleScript (SCPT), a format actively abused for macOS phishing. Plus new Ruby, VSCode , NPM & Homebrew payloads. A true macOS red team Swiss Army knife. AppleScript initial access guide by @antoinedss 👇 blog.balliskit.com/macos-redteam-… #redteam

Tutorial: DLL Sideloading and function proxying with ShellcodePack BallisKit ShellcodePack version 2.8.0 is available! This version comes with a new GUI, EDR evasion methods as well as enhanced DLL sideloading/hijacking. You can find the tutorial here: blog.balliskit.com/tutorial-dll-s…

Thank you to @SuperHotTeapot who wrote the blog post!

News about our MacOS Objective-C implant for DarwinOps! We implemented a MachO reflective loader to run C and Objective-C tools from memory 🙂 We included ready-to-load Mach-O binaries, making advanced macOS evasion techniques easy to use and plug-and-play. #RedTeam #macOS

We are preparing a new version of ShellcodePack! -> Automated and improved DLL sideloading/proxying capacity -> AppDomain injection -> New Responsive GUI! -> Many more new features And of course up to date EDR evasion :) #shellcodepack

PKG is a kind of MacOS MSI equivalent. It's also used as an initial access payload! Read how DarwinOps can be used to generate PKG for redteams. We also included a method to run the PKG without admin privileges -> Reduced number of clicks! #redteam blog.balliskit.com/macos-redteam-…