slavaim / MacOSX-SparseFile-KernelModeLinks
A B-Tree sparse file implementation for kernel mode IOKit modules/extensions.
☆16Updated 8 years ago
Alternatives and similar repositories for MacOSX-SparseFile-KernelMode
Users that are interested in MacOSX-SparseFile-KernelMode are comparing it to the libraries listed below
Sorting:
- Mac OS X file system filter to redirect file operations☆42Updated 7 years ago
- A MacOS VFS isolation layer to redirect file I/O operations.☆30Updated 7 years ago
- A file system filter for Mac OS X☆101Updated 8 years ago
- A macOS IOKit objects hooker☆88Updated 8 years ago
- A MacOS network kernel extension filter for IPv4/IPv6 sockets.☆75Updated 7 years ago
- Learn MacOS kernel extensions☆46Updated 7 years ago
- A tool for Mac OS X proxy kext generation to export kernel symbols☆27Updated 7 years ago
- A Mac OS X kernel mode filter driver ( a kernel extension ) for devices, file systems and network☆169Updated 7 years ago
- runtime spy elf with android/linux and macho with macOS/IOS☆35Updated 8 years ago
- A TrustedBSD module to control execution of binaries with suid bit set☆38Updated 10 years ago
- Sample code for macOS Extensions Part 3☆24Updated 5 years ago
- Dump Kext information from Macos. Support batch analysis. The disassembly framework used is Capstone☆43Updated 8 years ago
- MacOS X process monitor using EndpointSecurity extension.☆35Updated 4 years ago
- C/C++ machine code obfuscation.☆65Updated 4 years ago
- Mac OS X syscall hook kext☆22Updated 9 years ago
- Example Mac OS X kernel extension that resolves symbols from the running kernel image☆55Updated 13 years ago
- 《macOS软件安全与逆向分析》随书的调试器代码☆52Updated 8 years ago
- ASUSTek 2015 BIOS Training☆14Updated 9 years ago
- IDA plugin CMake build-script☆37Updated 7 years ago
- macOS Private KPI Symbol Resolver☆49Updated 8 years ago
- A loadable dll that tracks memory changes, IAT hooks, and dynamically emplaced "JMP" in the host executable☆12Updated last year
- Convert machine code -> assembly code & assembly code -> machine code.☆19Updated 5 months ago
- This is a VmProtect integrated debugger, that will essentially allow you to disasm and debug vmp partially virtualized functions at the v…☆47Updated 8 years ago
- 文件透明过滤驱动☆15Updated 12 years ago
- Tool for reverse-engineering Apple's sandbox☆59Updated 8 years ago
- IDA plugin to extract Mach-O binaries located in the disassembly or data☆60Updated 6 years ago
- Generates a Python script to give public interface names in an ActiveX file to an IDB file.☆50Updated 4 years ago
- Lexer/Parser for 010 Editor's Binary Templates☆31Updated last month
- Checks macOS for Kernel Task Port. It may help detect intrusive kexts that would leak the kernel task.☆23Updated 2 years ago
- ☆38Updated 8 years ago