Skip to main content
Link
Menu
Expand
(external link)
Document
Search
Copy
Copied
og-apple-security
macOS Internals
Background Task Management
Entitlements and sandboxing constraints for Apps
Kernel-level mechanisms and interactions
Operational flow of background task coordination
backgroundtaskmanagementd
Books - Internals
Code Signing
Endpoint Security Framework
START ESF
Hardware - Internals
OSX PPC
Kernel
Kernel Extensions
Launchd Jobs
Launch Agents
Launch Daemons
smd
Plists
OpenBSM
START macOS Internals for Detection Eng
Versions
10.10 Yosemite
10.11 El Capitan
10.11 Sierra
10.13 High Sierra
10.14 Mojave
10.15 Catalina
10.9 Mavericks
Darwin - 2000
NeXTSTEP - 1989
POSIX standard - 1988
UNIX - dating back to 1969
Application Binary Interface
Application Binary Interface (ABI)
Exit Codes
System Calls (Syscalls)
Computer Architecture
Computer Architecture - Registers
Control Flow
Data Representation
Endianness
Significant Bits
Execution Models
Threads and Tasks
Memory - Computer Architecture
Computer Memory
Memory Management - Computer Architecture
Linearity and Linear Memory
Segmentation
Page Tables
Process Memory
Virtual Memory
mov and Pointers
Design
Figma
Forensics
Cellebrite
Home
OSINT
languages
objective-c
START Objective-C and Detection Engineering
obj-c-memory-management
History of Obj-C Memory Management
Obj-C Memory Management Model (ARC, Autorelease, Core Foundation)
Obj-C Pros, Cons, and Swift
Vulnerabilities and Exploits in Objective-C
Obj-C in macOS Memory Management Internals
ARM
ARMv8.3-A history & apple implementation
ARM64e ABI and Pointer Authentication (PAC)
Nested Virtualization (FEAT_NV)
Misc ARMv8.3 Features
Security Implications for macOS
Performance and Architectural Implications
ARM Exception Levels and PAC Key Separation
CTFs ARM
8ksec ARM CTF
Instructions
arm-books
bluefox-the-art-arm-assembly
Introduction to Assembly
Program Structure
OS Architecture Overview
compilers
just-in-time-compilation
Just-In-Time compilation and JIT memory regions
Code signing and entitlements for JIT
Executable-Only (XO) memory protections
JavaScriptCore JIT in Safari WebKit
Security implications and mitigations
lang-tools
LLVM
scripting
START Scripting
swift
swift-memory-management
Swift’s Memory Management Model on macOS
History of Swift
Pros and Cons of Swift for macOS Development
Security issues
START Swift and Detection Engineering
developer-concepts
Projects
xcode
macOS Reversing
Binaries
Dynamic Analysis & Debugging
dynamic-analysis-techniques
Instrumentation
Debugging
Dynamic Analysis
Fuzzing
Software Introspection
macOS-reversing-tools
Frida
macOS-reversing-debuggers
GDB
LLDB
Reversing
Static Analysis
Books - Static Analysis
Secrets of Reverse Engineering
Reversing: Secrets of Reverse Engineering 1st Edition
The Ghidra Book
The Ghidra Book - The Definitive Guide
The IDA Pro Book
The IDA Pro Book 2nd Edition - The Unofficial Guide to the World's Most Popular Disassembler
Techniques in Static Analysis
Decompilation
Disassembly
Static Analysis Technique
Tools - Static Analysis
Binja
Ghidra
Hopper
Ida
Virtualization
Parallels
UVM
languages
compilers
just-in-time-compilation
Just-in-time compilation
Table of contents
Just-In-Time compilation and JIT memory regions
Code signing and entitlements for JIT
Executable-Only (XO) memory protections
JavaScriptCore JIT in Safari WebKit
Security implications and mitigations