
obex
Obex – Blocking unwanted DLLs in user mode
adversarial-attackids-ips-evasionpost-exploitation+1

Obex – Blocking unwanted DLLs in user mode

Userland exec PoC to be used as attack vector technique


Abuses macOS debugger entitlements and DYLD_INSERT_LIBRARIES to dump or search a running process's memory while shifting EDR attribution to a signed…

An in-memory minimal CPU for agnostic on-the-fly protocols creation