awesome-apple-security

Curated list of tools, techniques and resources related to Apple Security (macOS, iOS, iPadOS, tvOS, watchOS) aimed to help people with an interest in Apple related security topics to get a hold in this field, and for professionals to discover / explore other resources.
https://github.com/BlackSquirrelz/awesome-apple-security

Last synced: 12 days ago
JSON representation

Apple Guidance
- Acquisition and Evidence Collection
  - Developers Documentation - Developer Documentation for reference.
  - Security Documentation - Security Documentation of Apple Products.
  - Report Vulnerabilities - In case you want to submit a vulnerability to Apple.
  - Apple File System - Documentation on the filesystem.
  - Apple Security Bounty - Apple's Bug Bounty Program information.
  - Apple Security Bounty - Apple's Bug Bounty Program information.
  - Apple Platform Security - Apple Information on Platform Security.
  - Apple File System - Documentation on the filesystem.
- - Apple Security Bounty - Apple's Bug Bounty Program information.
  - Apple Platform Security - Apple Information on Platform Security.
Articles
- Acquisition and Evidence Collection
  - Office365 Sanbox Escape - Sandbox Escape macOS for Office365.
  - RE Cocoa Applications
  - RE Cocoa Applications
- - RE Cocoa Applications
Attack Vectors and Adversary Techniques
- Acquisition and Evidence Collection
  - MITRE ATT&CK - macOS Matrix - Tools, Techniques and Attack Vectors used by adversaries to target macOS devices.
  - Sandbox Evasion Macros - How to evade the sandbox with MS Office Macros.
Blogs
- Acquisition and Evidence Collection
  - Mac Security Blog - Generic Blog on macOS Security.
  - Wojciech Regula's Blog - Wojciech's macOS Related blog.
  - Mac4n6 - Mac Forensics.
  - Mandiant - Mandiant macOS Articles.
  - Cedric Owens Medium Blog - Cedric Owens Blog on macOS Security.
  - Scripting OSX! - macOS Admin related Blog.
  - Objective-See by Patrick Wardle - Patrick Wardle's Website.
  - Objective-See by Patrick Wardle - Patrick Wardle's Website.
- - Cedric Owens Medium Blog - Cedric Owens Blog on macOS Security.
  - Objective-See by Patrick Wardle - Patrick Wardle's Website.
Books and Magazines
- Acquisition and Evidence Collection
  - The Art of Mac Malware - Primer on malware on macOS by Patrick Wardle.
  - macOS Incident Response - macOS Incident Response primer (2017).
  - Kernel Book - Book in three parts about the macOS Kernel.
  - eForensics Magazine - Magazine for (macOS) Forensics.
  - iOS Forensics for Investigators - iOS Forensics Book.
  - iOS Hacking Guide - By Security Innovation.
  - iOS Application Security: The Definitive Guide for Hackers and Developers - By David Thiel.
  - Hacking and Securing iOS Applications - By Jonathan Zdziarski.
  - iOS Hacker's Handbook - By Charlie Miller.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - Kernel Book - Book in three parts about the macOS Kernel.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - macOS Internals - Internals of macOS (2007).
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - Kernel Programming - Kernel Programming reference for macOS / iOS.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - Learning iOS Penetration Testing - By Swaroop Yermalkar.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
- - macOS Internals - Internals of macOS (2007).
  - Kernel Programming - Kernel Programming reference for macOS / iOS.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - Learning iOS Penetration Testing - By Swaroop Yermalkar.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
  - iOS Penetration Testing: A Definitive Guide to iOS Security - By Kunal Relan.
Conferences
- Frida
  - MacDevOps YVR
  - OBTS
  - MacDevOps YVR
  - OBTS
Forensics
- Acquisition and Evidence Collection
  - Cellebrite Digital Collector (Former Macquisition) - Commercial Tooling for Acquisition of macOS Forensic Images.
  - The ESF Playground - A tool to view the events in Apple Endpoint Security Framework (ESF) in real time.
  - mac_apt - Plugin based forensics framework for quick mac triage that works on live machines, disk images or individual artifact files.
  - Auditor - Deprecated macOS DFIR tool for older systems.
  - Collector - macOS offshoot for live response.
Hardware Information
- Acquisition and Evidence Collection
  - Hardware Database - Lookup hardware specifications of every mac model.
  - M1 Chip Safe Mode - Blogpost on M1 Chipset Safe Mode.
Log Analysis
- Acquisition and Evidence Collection
  - Unified Log - A primer on macOS Unified Log.
  - Unified Log in Incident Response - Using the Unified Log for Incident Response.
Malware
- Acquisition and Evidence Collection
  - The Safe Mac - Older macOS Malware Catalogue.
  - VX-Underground Malware Source Code - Malware Sourcecode collection (various OS).
  - Objective-See Malware - Malware Collection by Patrick Wardle.
  - VX-Underground - Malware Collection (various OS).
People
- Acquisition and Evidence Collection
  - Cody Thomas - GitHub - Developer of Mythic C2.
  - Regula Wojciech - X - macOS Security Researcher.
  - Alexis Brignoni - X - DFIR Researcher, iLEAPP Developer.
  - M4shl3 - hackmd.io - Digital Forensics Investigator.
  - Cedric Owens - X - macOS Security Researcher and Purple Teamer.
- - Cedric Owens - X - macOS Security Researcher and Purple Teamer.
  - Csaba Fitzl - X - Hungarian Researcher specialized on macOS Security.
  - Patrick Wardle - X - Founder of Objective-see, and Security Researcher.
  - Sarah Edwards - X - Security Researcher and Trainer of SANS 518 Course.
Persistence
- Acquisition and Evidence Collection
  - Persistence Samples - Collection of persistence methods and samples used.
  - Apple Persistence Mechanisms - Persistence Mechanisms.
  - PersistentJXA - Collection of macOS persistence methods in JXA.
Processes
- Acquisition and Evidence Collection
  - True Tree - Improved process tree.
  - Process and File Monitor - Command Line Utilit(ies) to monitor processes and files.
- - Process and File Monitor - Command Line Utilit(ies) to monitor processes and files.
Software Collections
- Acquisition and Evidence Collection
  - Macintosh Repository - Repository of old macOS Software.
  - IPSW Repository - Repository of IPSW Restore files.
  - Mr Macintosh - Collection of macOS Firmware and so much more.
Tools
- Dynamic Analysis Tools
  - Corellium - The only platform offering ARM-based mobile device virtualization using a custom-built hypervisor for real-world accuracy and high performance.
  - itunnel - Use to forward SSH via USB.
  - membuddy - Dynamic memory analysis & visualisation tool for security researchers.
  - LLDB - A next generation, high-performance debugger.
  - Burp Suite - An advanced HTTPS proxy software.
  - Frida - Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.
  - frida-gum - Cross-platform instrumentation and introspection library written in C.
  - Fridax - Fridax enables you to read variables and intercept/hook functions in Xamarin/Mono JIT and AOT compiled iOS/Android applications.
  - r2frida - Radare2 and Frida better together.

Programming Languages

Python 10 Objective-C 6 C 6 JavaScript 6 Swift 3 TypeScript 3 C++ 3 Java 2 Objective-C++ 2 Ruby 1

Categories

Books and Magazines 130 Tools 67 Trainings 12 Apple Guidance 10 Blogs 10 People 9 Forensics 5 Articles 4 Malware 4 Conferences 4 Software Collections 3 Processes 3 Persistence 3 Videos 3 Log Analysis 2 Attack Vectors and Adversary Techniques 2 Hardware Information 2

Sub Categories

Acquisition and Evidence Collection 126 Frida 24 Dynamic Analysis Tools 23 Reverse Engineering Tools 21 Static Analysis Tools 10 File System 3 Offensive Tools 3 TCC & Permissions Tools 1 Process Viewer 1

Keywords

reverse-engineering 9 ios 8 frida 8 android 4 radare2 3 instrumentation 3 unicorn-emulator 3 security 3 mobile-security 2 machoexplorer 2 macos 2 machoview 2 ios-security 2 malware 2 android-security 2 emulator 2 forensics 2 disassembler 2 c 2 macho 2 mobile 2 framework 2 ipa 2 debugger 2 emulation 1 dynarmic 1 capstone 1 fishhook 1 hypervisor 1 keystone 1 kvm 1 unicorn 1 unidbg 1 whale 1 xhook 1 analysis 1 binary 1 cross-architecture 1 decrypted 1 dumpdecrypted 1 pentest 1 binary-analysis 1 commandline 1 malware-analysis 1 iproxy 1 library 1 usb 1 usbmuxd 1 software-analysis 1 malware-detection 1