CatalogLOOBins

ORCHARD · Tool

say

2 techniquesmacOSLOOBinsGPL-3.0

Read sensitive data

Defense EvasionCollectionmacOS

The following command can read and process sensitive files and redirects the output to a file..

say -f /home/user/sensitive-files -i  > loot.txt;
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Defense Evasion, Collection
Detection
No detection content available: No detection content available

Collect clipboard data

Defense EvasionDiscoveryCollectionmacOS

The command is designed to enhance privacy by muting the system volume,using a less recognizable "Whisper" voice with the "say" command, processing the copied text in the clipboard, and saving the output to a file named "loot.txt."

osascript -e 'set volume output muted true' ;   say $(pbpaste) -i  > loot.txt;
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Defense Evasion, Reconnaissance, Discovery, Collection
Detection
No detection content available: No detection content available