tool
heapster
A tool for exploring the macOS libmalloc heap from LLDB: zones, magazines, free lists and the state of individual allocations, introduced in our libmalloc post.
tag
#macos
talk
IRK: Crafting OS X Kernel Rootkits
Apple’s OS X operating system has been gaining in popularity. This presentation details how to manipulate the OS X kernel in order to hide an attacker’s activities and maintain access.
slides Jesse D'Aguanno
talk
Mach Shellcodes and Injectable OS X Rootkits
Using the Mach interfaces in the OS X kernel to manipulate the kernel from user space, i.e. from shellcode, to alter kernel structures. Example shellcodes are included.
slides Jesse D'Aguanno