dlevi309 / MacRootKitLinks
A RootKit for macOS that can perform kernel read/write, hook kernel and userspace functions, set custom conditional breakpoints, etc
☆24Updated 2 years ago
Alternatives and similar repositories for MacRootKit
Users that are interested in MacRootKit are comparing it to the libraries listed below
Sorting:
- One-Click to Completely Take Over A macOS Device☆17Updated 2 years ago
- arm64 and arm64e dylib injector☆33Updated last year
- My collection of PoCs☆26Updated last year
- PCIDriverKit proof-of-concept for CVE-2022-26763☆38Updated 2 years ago
- IDA plugin that resolves PPL calls to the actual underlying PPL function.☆58Updated 2 years ago
- ☆54Updated 3 years ago
- Accompanying code for blog post "Mapping iOS Persistence Attack Surface using Corellium"☆10Updated 3 weeks ago
- ☆39Updated 4 years ago
- SnatchBox (CVE-2020-27935) is a sandbox escape vulnerability and exploit affecting macOS up to version 10.15.x☆31Updated 4 years ago
- Simple Kernel Extension to read and write Kernel Memory☆15Updated 2 years ago
- Utility to manipulate codesigned application in Mac OS X. Demonstrate the use of csops system call.☆78Updated last year
- IDAPython scripts☆10Updated 3 years ago
- WebKit/JSC CodeQL Databases☆17Updated 2 weeks ago
- Exploit for CVE-2023-32364☆21Updated last year
- A Ghidra extension for reverse-engineering macOS binaries.☆19Updated 4 months ago
- An assistant for BinDiff☆24Updated 2 years ago
- ☆28Updated 2 years ago
- library to load and parse Mach-O core files without dependencies☆16Updated 3 years ago
- XPC sniffer using LLDB☆44Updated 8 months ago
- A general purpose toolkit to make vulnerability research on macOS easier.☆80Updated 3 months ago
- Mickey's Blogs☆39Updated 2 weeks ago
- macOS codesigning translocation vulnerability.☆42Updated 3 years ago
- Enumerate running processes using com.apple.CodeSigningHelper☆13Updated last year
- arm64 IOKit class dumper☆18Updated 3 months ago
- Redirect spawned iOS application stdout and stderr to pty☆28Updated 4 months ago
- Homebrew Bottle Downloader☆17Updated 2 weeks ago
- A simple macOS debugger detection trick☆12Updated last month
- Mach-O view plugin☆20Updated last year
- Chaos iOS < 12.1.2 PoC by @S0rryMyBad since he posted it as a photo rather than a source code. Also cleaned up.☆63Updated 2 years ago
- GreenLambert macOS IDA plugin to deobfuscate strings☆12Updated 3 years ago