gyunaev / macprocmon
MacOS X process monitor using EndpointSecurity extension.
☆34Updated 3 years ago
Alternatives and similar repositories for macprocmon:
Users that are interested in macprocmon are comparing it to the libraries listed below
- Updated sample code for OS X and iOS Kernel Programming book☆37Updated 6 years ago
- Learn MacOS kernel extensions☆46Updated 7 years ago
- Sample code for macOS Extensions Part 3☆24Updated 5 years ago
- Tool for reverse-engineering Apple's sandbox☆56Updated 7 years ago
- A macOS behavior audit / event monitoring system with scope of file, process and network events (based on Endpoint Security Framework).☆44Updated last month
- A kext to facilitate calling PE_enter_debugger on machines that don't respect Cmd-Ctrl-Opt-Shift-Esc☆15Updated 6 years ago
- Misc llvm patches☆23Updated 3 years ago
- Utility to manipulate codesigned application in Mac OS X. Demonstrate the use of csops system call.☆74Updated 11 months ago
- slightly modified version of jonathan levins lsdtrip bin available at http://newosxbook.com/tools/lsdtrip.html☆18Updated 10 months ago
- Binary Format of iOS 13 Sandbox Profile Collection☆51Updated 5 years ago
- ios kernel class tree☆23Updated 5 years ago
- do not debug me☆11Updated 5 years ago
- Sniffing on port messages☆25Updated 8 years ago
- macOS Private KPI Symbol Resolver☆49Updated 7 years ago
- App sandbox escapes for macOS☆28Updated 4 years ago
- A runtime ObjC class-dump☆69Updated 2 months ago
- This tool will help to fix the Mach-O header of iOS kernel which dump from the memory. So that IDA or function symbol-related tools can l…☆22Updated 7 years ago
- Checks macOS for Kernel Task Port. It may help detect intrusive kexts that would leak the kernel task.☆21Updated last year
- A free runtime modification library.☆24Updated 6 years ago
- Mach-O file parser.☆50Updated 5 months ago
- X-Monitor is an open-source, extensible event monitoring tool for macOS that provides security professionals with the ability to perform …☆18Updated 9 months ago
- a toy to play with siguza's very first 0 day - sandbox escape☆20Updated 4 years ago
- A collection of CVE POC code☆11Updated 5 years ago
- symbol dumps of iOS shared caches☆33Updated 2 years ago
- Experiment to attempt to build Apple's dyld tools.☆63Updated 4 years ago
- Cross Platform Hook Library based on Detours☆29Updated 4 months ago
- A simple demonstration of the macOS Network Extension☆15Updated 3 years ago
- Learning how to use IOSurfaceAccelerator☆23Updated last year
- Guessed headers of non-public Apple SDK☆25Updated last month
- XNU kernel symbol resolver(kernel extension)☆12Updated 5 years ago