https://github.com/squiffy/Masochist

XNU Rootkit Framework
https://github.com/squiffy/Masochist

Last synced: about 1 month ago
JSON representation

XNU Rootkit Framework

• Host: GitHub
• URL: https://github.com/squiffy/Masochist
• Owner: squiffy
• License: bsd-3-clause
• Created: 2014-11-07T05:10:41.000Z (about 10 years ago)
• Default Branch: master
• Last Pushed: 2015-01-03T05:43:15.000Z (almost 10 years ago)
• Last Synced: 2024-08-01T22:42:08.140Z (4 months ago)
• Language: C
• Homepage:
• Size: 385 KB
• Stars: 124
• Watchers: 17
• Forks: 22
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• osx-and-ios-security-awesome - Masochist - Framework for creating XNU based rootkits. (macOS Security)

README

        
# Masochist

Masochist is a framework for creating XNU based rootkits. Very useful in OS X and iOS security research. It can do cool things like:

  - Public symbol resoluton

  - Process manipulation

  - System call hijacking

Masochist is currently compatible with 64-bit OS X machines (I think). I've only tested this on 10.10. If anyone is brave enough to try it on their system, I would be very grateful.

### Version

0.1

### Usage

To use this code, please import these files into your kernel extension project in Xcode. Then, import the headers that you need to use.

I recommend [this repo](https://github.com/squiffy/Masochist-Template) as a starting point for your project. It has been configured and is ready to be built inside Xcode.

The API docs can be found on the Wiki page.

### Disclaimer

Please don't do anything stupid/illegal with this. This stuff can break your Mac. If you're unsure, run OS X in a VM.