osascript

macOS execution T1059.002

Execute AppleScript or JavaScript for Automation (JXA). Can control applications, access keychain, display prompts, and run system commands.

Binary Paths

  • /usr/bin/osascript

Glob Patterns

Pattern Notes
osasc*
Star matches 'ript'
o?ascript
Wildcard replaces 's'
osa?cript
Wildcard replaces 's' in middle
osascri?t
Wildcard replaces 'p'
o*t
Aggressive star wildcard
/usr/bin/osasc*
Full path wildcard
/???/bin/o*t
Full path mixed wildcards
osascri[p]t
Bracket class on 'p'

Pattern Tester

$

Try typing osascript or a full path like /usr/bin/osascript

YARA Rule

Auto-generated detection rule for osascript

      

Platform Notes

osascript is macOS-exclusive. Use -e flag to pass inline code: osascript -e 'do shell script "id"'. JXA mode available with -l JavaScript. Wildcard execution requires shell glob expansion — works in bash and zsh (with NO_NOMATCH set).

Resources

← Previous openssl Catalog Next → perl