slavaim / MacOSX-VFS-Isolation-Filter
A MacOS VFS isolation layer to redirect file I/O operations.
☆28Updated 6 years ago
Related projects ⓘ
Alternatives and complementary repositories for MacOSX-VFS-Isolation-Filter
- Mac OS X file system filter to redirect file operations☆41Updated 6 years ago
- A B-Tree sparse file implementation for kernel mode IOKit modules/extensions.☆15Updated 7 years ago
- A file system filter for Mac OS X☆99Updated 7 years ago
- Sample code for macOS Extensions Part 3☆24Updated 4 years ago
- A tool for Mac OS X proxy kext generation to export kernel symbols☆25Updated 6 years ago
- A MacOS network kernel extension filter for IPv4/IPv6 sockets.☆74Updated 7 years ago
- Tool for reverse-engineering Apple's sandbox☆55Updated 7 years ago
- macOS Private KPI Symbol Resolver☆49Updated 7 years ago
- A macOS IOKit objects hooker☆86Updated 7 years ago
- A TrustedBSD module to control execution of binaries with suid bit set☆37Updated 10 years ago
- MacOS X process monitor using EndpointSecurity extension.☆33Updated 3 years ago
- A kext to facilitate calling PE_enter_debugger on machines that don't respect Cmd-Ctrl-Opt-Shift-Esc☆14Updated 6 years ago
- A Mac OS X kernel mode filter driver ( a kernel extension ) for devices, file systems and network☆166Updated 6 years ago
- Learn MacOS kernel extensions☆46Updated 7 years ago
- Parasite.kext☆34Updated 8 years ago
- Dump Kext information from Macos. Support batch analysis. The disassembly framework used is Capstone☆43Updated 7 years ago
- Easily build, install and deploy the XNU kernel☆63Updated 8 years ago
- Non kernel components of DTrace on Mac OS☆25Updated 7 years ago
- Mac OS X syscall hook kext☆22Updated 8 years ago
- install firehose for building xnu☆19Updated 5 years ago
- Objective-C wrapper around SecCertificateRef☆37Updated 7 months ago
- macOS application that makes use of the EndpointSecurity framework☆18Updated 5 years ago
- Small util to discover OS X sysent via bruteforce☆33Updated 8 years ago
- Updated sample code for OS X and iOS Kernel Programming book☆35Updated 5 years ago
- IDA plugin to extract Mach-O binaries located in the disassembly or data☆59Updated 5 years ago
- Apple's gdb fork with some fixes and enhancements☆56Updated 10 years ago
- X-Monitor is an open-source, extensible event monitoring tool for macOS that provides security professionals with the ability to perform …☆17Updated 6 months ago
- A Kext that can be used to disable Rootless in OS X El Capitan/macOS Sierra. You need to sign it OR use an exploit to make OS X load it.☆78Updated 4 years ago
- A simple demonstration of the macOS Network Extension☆15Updated 3 years ago
- OSX Events Monitor☆21Updated 6 years ago