Description

EXP-312: Advanced macOS Control Bypasses

OffSec’s Advanced macOS Control Bypasses (EXP-312) course provides a comprehensive understanding of macOS security and its inner workings. You’ll gain hands-on experience identifying and exploiting logic-based vulnerabilities within the operating system, learning to bypass security mechanisms and escalate privileges to ultimately gain root access on macOS systems.

Completion of the online training course and successfully passing the associated exam earns the OffSec macOS Researcher (OSMR) certification. This certification validates your expertise in macOS security and demonstrates your ability to analyze and exploit complex vulnerabilities, making you a highly sought-after professional in the field.

Topics covered in the Advanced macOS Control Bypasses course (EXP-312)
Introduction to macOS Internals
Debugging, Tracing & Hopper
Shellcoding in macOS
Dylib Injection
Mach and Mach Injection
Hooking
XPC Exploitation
Sandbox Escape
Attacking Privacy (TCC)
Symlink Attacks