<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Blackwing Intelligence: macos</title><link>https://blackwinghq.com/tags/macos/</link><description>Blackwing Intelligence provides high-end security engineering, analysis, and research services for engineering focused organizations</description><language>en</language><lastBuildDate>Tue, 02 Jan 2024 00:00:00 +0000</lastBuildDate><atom:link href="https://blackwinghq.com/tags/macos/index.xml" rel="self" type="application/rss+xml"/><item><title>[tool] heapster</title><link>https://blackwinghq.com/research/tools/heapster/</link><pubDate>Tue, 02 Jan 2024 00:00:00 +0000</pubDate><guid>https://blackwinghq.com/research/tools/heapster/</guid><description>A tool for exploring the macOS libmalloc heap from LLDB: zones, magazines, free lists and the state of individual allocations, introduced in our libmalloc post.</description></item><item><title>[talk] IRK: Crafting OS X Kernel Rootkits</title><link>https://blackwinghq.com/research/talks/irk-osx-kernel-rootkits/</link><pubDate>Thu, 07 Aug 2008 00:00:00 +0000</pubDate><guid>https://blackwinghq.com/research/talks/irk-osx-kernel-rootkits/</guid><description>Apple’s OS X operating system has been gaining in popularity. This presentation details how to manipulate the OS X kernel in order to hide an attacker’s activities and maintain access.</description></item><item><title>[talk] Mach Shellcodes and Injectable OS X Rootkits</title><link>https://blackwinghq.com/research/talks/mach-shellcode-osx-rootkits/</link><pubDate>Sat, 14 Jun 2008 00:00:00 +0000</pubDate><guid>https://blackwinghq.com/research/talks/mach-shellcode-osx-rootkits/</guid><description>Using the Mach interfaces in the OS X kernel to manipulate the kernel from user space, i.e. from shellcode, to alter kernel structures. Example shellcodes are included.</description></item></channel></rss>