Moocable is learner-supported. When you buy through links on our site, we may earn an affiliate commission.
Information Security

MacOS Dylib Injection through Mach-O Binary Manipulation

Malware Unicorn via Independent

Description

This workshop is designed for those looking to develop offensive tooling or learning the technique for defense purposes. The content will cover developing stager code and shellcode for dynamic library injection in macOS environments (Mojave 10.14 & Catalina 10.15) with Golang compiled binaries. The topics covered will include compiling Go dylibs, parsing Mach-O headers, binary code caves, binary entrypoint redirection, typical assembly routines used in shellcode, and understanding the Mach-O load order.

Tags
Higher Education

Syllabus

Introduction
Background
Compiling a Go dylib with C-Shared Build Mode
Parsing the Mach-O Header
Entrypoint Redirection
Loading the Dylib in Memory
Appendix

Start Learning Find study partner
Online Course
Information Security

MacOS Dylib Injection through Mach-O Binary Manipulation

Malware Unicorn
Start Learning Find study partner
Affiliate notice

This workshop is designed for those looking to develop offensive tooling or learning the technique for defense purposes. The content will cover developing stager code and shellcode for dynamic library injection in macOS environments (Mojave 10.14 & Catalina 10.15) with Golang compiled binaries. The topics covered will include compiling Go dylibs, parsing Mach-O headers, binary code caves, binary entrypoint redirection, typical assembly routines used in shellcode, and understanding the Mach-O load order.

Introduction
Background
Compiling a Go dylib with C-Shared Build Mode
Parsing the Mach-O Header
Entrypoint Redirection
Loading the Dylib in Memory
Appendix

Tags

Higher Education

Quick Links

Browse by subject

Browse by provider

Browse by university

Browse by publisher

Browse by institution

Roadmaps

Posts