Observed arrival · 2026-09-04
COVENANT, the macOS Red-Team Console That Wants to Command the Unseen
Credibility concern recorded. The source reference remains available for verification and correction.
A polished operator-console pitch for authorized macOS red-team work, advertising payload building, live sessions, credential harvesting, persistence, delivery tooling, and an intelligence server.
Field notes
The homepage organizes the product around three stages—Forge, Operate, and Extract—and describes a console that brings payload construction, session tasking, collection, delivery, and persistence into one interface. Its macOS-specific vocabulary includes LaunchAgents, LaunchDaemons, keychain access, ClickFix pages, compiled .scpt documents, and reverse-proxy sign-in flows. A displayed session claims user and root activity on an ARM64 Mac, while the page also advertises a 30-second tasking heartbeat and an indexed internal receiver for collected archives.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue