alichtman / alichtman/malware-techniques
macOS Anti-Debug
Open
anti-debug
macos
- Dominant language
- Python
- Stars
- 82
- Forks
- 8
- PR merge metrics
- No merged PRs in 30d
Description
https://web.archive.org/web/20160513183512/https://reverse.put.as/wp-content/uploads/2012/07/Secuinside-2012-Presentation.pdf
New techniques:
- `vm_region_recurse()` on p.40
- [`dylib_command` specification abuse on p.42](https://reverse.put.as/2012/01/31/anti-debug-trick-1-abusing-mach-o-to-crash-gdb/)
- Code Injection on p.45
+ Technique 1: `DYLD_INSERT_LIBRARIES`
+ Technique 2: [`LC_LOAD_DYLIB`, implemented at bsmt/dylbert](https://github.com/bsmt/dylbert)
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.