tool
heapster
A tool for exploring the macOS libmalloc heap from LLDB: zones, magazines, free lists and the state of individual allocations, introduced in our libmalloc post.
tag
#macos
talk
XNU Spelunking or Fuzzing the kernel inside your kernel
XNU, the OS X kernel, is made up of a somewhat unholy marriage of the monolithic BSD kernel and the CMU mach microkernel. Because of this marriage, in addition to BSD syscalls, XNU provides additional …
video Jesse D'Aguanno
talk
Mach Shellcodes and Injectable OS X Rootkits
Using the Mach interfaces in the OS X kernel to manipulate the kernel from user space, i.e. from shellcode, to alter kernel structures. Example shellcodes are included.
slides Jesse D'Aguanno
talk
IRK: Crafting OS X Kernel Rootkits
Apple’s OS X operating system has been gaining in popularity. This presentation details how to manipulate the OS X kernel in order to hide an attacker’s activities and maintain access.
slides Jesse D'Aguanno