EXP-312: macOS Control Bypasses
Learn the skills needed to bypass security controls implemented by macOS, and exploit logic vulnerabilities to perform privilege escalation on macOS systems with EXP-312 certification.
-
Module 1: macOS Control Bypasses: General Course Information
-
Module 2: Introduction to macOS
-
Module 3: macOS Binary Analysis Tools
-
Module 4: The Art of Crafting Shellcodes
-
Module 5: Dylib Injection
-
Module 6: The Mach Microkernel
-
Module 7: Function Hooking on macOS
-
Module 8: XPC Attacks
-
Module 9: The macOS Sandbox
-
Module 10: . Bypassing Transparency, Consent, and Control (Privacy)
-
Module 11: Symlink and Hardlink Attacks
-
Module 12: . Getting Kernel Code Execution
-
Module 13: Injecting Code into Electron Applications
-
Module 14: . Mount(ain) of Bugs
-
Module 15: macOS Penetration Testing
About The Course
macOS Control Bypasses (EXP-312) is GIAC first macOS security course. It’s an offensive logical exploit development course for macOS, focusing on local privilege escalation and bypassing the operating system’s defenses. EXP-312 is an advanced course that teaches the skills necessary to bypass security controls implemented by macOS, and exploit logic vulnerabilities to perform privilege escalation on macOS systems. Students who complete the course and pass the exam earn the Offensive Security macOS Researcher (OSMR) certification.
Course Objectives
- Obtain a strong understanding of macOS internals
- Learn the basics of Mach messaging
- Learn how to bypass Transparency, Content and Control (TCC) protections
- Learn how to escape the Sandbox
- Perform symbolic link attacks
- Leverage process injection techniques
- Exploit XPC for privilege escalation
- Perform hooking based attacks
- Write Shellcode for macOS
- Bypass kernel code-signing protection
Pre-Requisites
- C programming knowledge
- Normal user experience with macOS
- Basic familiarity with 64-bit assembly and debugging
- Understanding of basic exploitation concepts
What's included
- 32 Hours Training Course
- Certificate
- 15 Modules
- 24/7 Support