OSMR

High-Level OS Architecture  XNU: Mach microkernel, Components from BSD, IOKit, Kernel Exte...

Universal Binaries  Mach-O, a file format for various program files on all Apple platform.  Ran...

Primary language for develeping macOS application.  Objective-C extends the standard C programmi...

Tool suite: MachOView, otool, codesign, objdump, jtool2    Display basic code signature info:  ...

Tool Suite: LLDB Hopper dtrace    MacOS is very restrictive when it comes to debugging. The per...

Convention:  RDI: arg1  RSI: arg2  RDX: arg3  RCX: arg4  R8: arg5  R9: arg6  Stack: Starti...

Use /bin/zsh, full command /bin/zsh -c <COMMAND>  Need execve syscall  RDI   arg1: /bin/zsh  R...

C code for a bind shell:      socket(2,1,0)    reserve space for sockaddr_in:  ...

Many elements of access control depond on the app's signature, especially the embedded entitlemen...

Another way of injecting code is by performing dylib hijacking or a dylib proxying attack, which ...

Mach: One of the fundamental components of macOS. Limited to managing only the most basic tasks, ...

Remote Code Injection  Get the SEND right of the task port of the process  Allocate m...

Use codesign to verify the code signature of the app and its entitlement.  The entitlement...

Prompt Mach Thread to POSIX Thread Threads are implemented in the Mach kernel, and each thread b...