/explore
|
You are here 
|
codecolor.ist | ||
| | | | |
pewpewthespells.com
|
|
| | | | | ||
| | | | |
reverse.put.as
El Capitan is finally released and System Integrity Protection aka SIP aka rootless is finally a reality we must face. Let me briefly describe SIP (technical details maybe in another post, now that El Capitan is final and out of NDAs). This post by Rich Trouton contains a very good description of its userland implementation and configuration. What is SIP anyway? The description that I like to use is that SIP is a giant system-wide sandbox, that controls access to what Apple considers critical files and f... |
|
| | | | | ||
| | | | |
theevilbit.github.io
TL;DR It works, but very limited due to heavy sandboxing, you can only read and copy files to your sandbox folder or consume some CPU power. If you have a way to escape sandbox then go for it, or could be used as part of a multi-part malware. Intro I'm reading Jonathan Levin's *OS Internals Vol I. book (user mode - *OS Internals: - Welcome!), and I got to the chapter where he talks about Spotlight importers, and my first thought was that it would be an awesome way to persist on macOS. |
|
| | | | | ||
| | | | |
binarydebt.wordpress.com
Kernel symbols are names of functions and variables. Global symbols are those which are available outside the file they are declared in. Global symbols in the Linux kernel currently running on a system are available through `/proc/kallsyms` file. This includes symbols defined inside kernel modules currently loaded. Global symbols are of two types: those explicitly... |
|
| | | |||
