python3

macOS execution T1059.006

Python 3 interpreter on macOS. Available via Xcode CLI tools or Homebrew. Enables arbitrary code execution and network operations.

Binary Paths

  • /usr/bin/python3
  • /usr/local/bin/python3
  • /opt/homebrew/bin/python3

Glob Patterns

Pattern Notes
python?
Matches python3, python2 etc.
p?thon3
Wildcard replaces 'y'
py*3
Star matches 'thon'
pyth[o]n3
Bracket class on 'o'
python[3]
Bracket class on version digit
/usr/bin/python?
Full path wildcard on version
/???/bin/p*3
Full path mixed wildcards
/opt/homebrew/bin/python?
Homebrew install path

Pattern Tester

$

Try typing python3 or a full path like /usr/bin/python3

YARA Rule

Auto-generated detection rule for python3

      

Platform Notes

On macOS, /usr/bin/python3 may require Xcode CLI tools. Apple Silicon Macs use /opt/homebrew/bin/python3 for Homebrew installs. Use full paths for reliability.

Resources

← Previous python3 Catalog Next → regsvr32