osx-security-awesome

Security hub

A collection of OSX and iOS security resources

A collection of OSX and iOS security resources

GitHub

734 stars
54 watching
113 forks
last commit: 11 months ago
Linked from 3 awesome lists

awesomeawesome-listhacking-macmac-osxmalwareosx-incident-responseosx-security

Hardening / Sandblaster

Paper

Digital Forensics / Incident Response (DFIR) / APOLLO tool

Presentation slides 239 about 2 months ago
Source code 564 9 months ago

Digital Forensics / Incident Response (DFIR) / venator

Source 176 over 4 years ago

Digital Forensics / Incident Response (DFIR) / AutoMacTC

Modular forensic triage collection framework from CrowdStrike

Digital Forensics / Incident Response (DFIR) / OSX incident response

Slides OSX incident response at GitHub

Digital Forensics / Incident Response (DFIR) / mac-apt

DFIR scripts 179 4 months ago The author also has a collection of

Presentations and Papers / Windshift APT

Deep-dive write-up by Objective See

Presentations and Papers / Writing Bad @$$ Malware for OSX

Slides and

Presentations and Papers / Security on OSX and iOS

Slides

Presentations and Papers / Thunderstrike

Video , hacking Mac's extensible firmware interface (EFI)

Presentations and Papers / Attacking OSX for fun and profit tool set limiations frustration and table flipping Dan Tentler

Follow-up from target

Presentations and Papers / Storing our Digital Lives - Mac Filesystems from MFS to APFS

slides

Presentations and Papers / SandScout: Automatic Detection of Flaws in iOS Sandbox Profiles

Presentation

Virus and exploit writeups / Proof of Concept for Remote Code Execution in WebContent

MachO tricks Appears to be slides from a presentation that ends with the CVE listed above

Virus and exploit writeups / I can be Apple, and so can you

Creating signed and customized backdoored macos apps

Virus and exploit writeups / Meltdown

Proof of concept 154 almost 7 years ago
Apple's statement
Measuring OSX meltdown patches performance
iPhone performance after Spectre patch

Virus and exploit writeups / Flashback

Detailed analysis

Virus and exploit writeups / iWorm

Detailed analysis

Virus and exploit writeups / XAgent Mac Malware Used In APT-28

Samples

Virus and exploit writeups / Exploiting the Wifi Stack on Apple Devices

Over The Air: Exploiting Broadcom’s Wi-Fi Stack (Part 1)
Over The Air: Exploiting Broadcom’s Wi-Fi Stack (Part 2)
Over The Air - Vol. 2, Pt. 1: Exploiting The Wi-Fi Stack on Apple Devices
Over The Air - Vol. 2, Pt. 2: Exploiting The Wi-Fi Stack on Apple Devices
Over The Air - Vol. 2, Pt. 3: Exploiting The Wi-Fi Stack on Apple Devices

Virus and exploit writeups / ChaiOS bug

previous Looks similar to rendering Arabic characters

Useful tools and guides / xnumon

source 230 over 5 years ago

Useful tools and guides / Remote Packet Capture for iOS Devices

Python utility
Another python utility 183 8 months ago

Worth following on Twitter

@patrickwardle
@objective_see
@0xAmit
@osxreverser
@liucoj
@osxdaily
@iamevltwin
@claud_xiao
@JPoForenso
@patrickolsen

Other OSX Awesome lists

ashishb/osx-and-ios-security-awesome 1,333 2 months ago

Backlinks from these awesome lists:

More related projects: