Fundamentos

• "Universal Binary: O formato de arquivo Mach-O" https://cocoaintheshell.whine.fr/2009/07/universal-binary-mach-o-format/
• "Fundamentos do formato de arquivo Mach-O" https://samhuri.net/posts/2010/01/basics-of-the-mach-o-file-format/
• "Como o OS X executa aplicativos" http://0xfe.blogspot.de/2006/03/how-os-x-executes-applications.html
• "Infectando o formato de objeto Mach-O" https://papers.put.as/papers/macosx/2005/mach-o_infection.ppt
• "Sob o iHood" https://www.defcon.org/images/defcon-16/dc16-presentations/defcon-16-hotchkies.pdf
• "Dissecação de um arquivo executável Mach-O 'Hello World' mínimo de 32 bits Intel, 204 bytes" http://seriot.ch/hello_macho.php
• "Criando um executável Mach-O minúsculo" http://osxbook.com/blog/2009/03/15/crafting-a-tiny-mach-o-executable/
• "Analisando arquivos Mach-O" http://lowlevelbits.org/parse-mach-o-files/
• "ELF vs. Mach-O" http://timetobleed.com/dynamic-linking-elf-vs-mach-o/
• "ELF vs. Mach-O 2" http://timetobleed.com/dynamic-symbol-table-duel-elf-vs-mach-o-round-2/
• "NASM Hello World para Intel Mac OS X x86 e x86_64" https://gist.github.com/FiloSottile/7125822
• "Engenharia reversa do SO: Um guia prático" https://www.youtube.com/watch?v=uQWH55yIgYU

Malware, anti-debug, técnicas de infecção, ofuscação e criptografia

• "Infectando Mach-O" http://nicolascormier.com/documentation/security/Infecting_Mach-O_Files.pdf
• "Abusando do formato Mach-O" http://cocoaintheshell.com/2009/10/abusing-mach-o
• "Vírus multiplataforma facilitados - Um estudo de caso" http://vxer.org/lib/vjp00.html
• "Executando executáveis no macOS a partir da memória" https://blog.cylance.com/running-executables-on-macos-from-memory
• macos_execute_from_memory https://github.com/prsecurity/macos_execute_from_memory/blob/master/main.c
• "Entendendo a proteção binária da Apple no Mac OS X" http://osxbook.com/book/bonus/chapter7/binaryprotection/
• "Macs também adoecem" http://www.irongeek.com/i.php?page=videos/derbycon6/104-macs-get-sick-too-tyler-halfpop-jacob-soo
• "Uma espiada sob o capô do malware iOS" http://webdiis.unizar.es/~ricardo/files/papers/GR-WMA-16.pdf
• "Criando rootkits para macOS" https://www.zdziarski.com/blog/wp-content/uploads/2017/02/Crafting-macOS-Root-Kits.pdf
• "Revisitando rootkits de kernel do Mac OS X" http://phrack.org/issues/69/7.html#article
• "Métodos de persistência de malware no Mac OS X" https://www.virusbulletin.com/uploads/pdf/conference/vb2014/VB2014-Wardle.pdf
• "Vamos jogar: Detecção e análise prática de malware no OS X" https://www.synack.com/wp-content/uploads/2016/03/RSA_OSX_Malware.pdf

Pesquisas e tutoriais diversos

• "Reversing e keygen do Crackme do qwertyoruiop" https://reverse.put.as/2018/10/06/reversing-and-keygenning-qwertyoruiop-crackme/
• "Tutorial de cracking #1 - CrackMe 'Sandwich'" http://reverse.put.as/wp-content/uploads/2012/06/Sandwich_crackme_tut_qwertyoruiop.txt
• "Resolvendo crackmes com LDPRELOAD" http://radare.today/solving-crackmes-with-ldpreload/
• "Analisando binários com o descompilador do Hopper" http://abad1dea.tumblr.com/post/23487860422/analyzing-binaries-with-hoppers-decompiler
• "Engenharia reversa do Hopper Disassembler v3.9.9" https://www.youtube.com/watch?v=pCITcLqgS9Q
• "Engenharia reversa de apps iOS: Hackeando o Lyft" https://realm.io/news/conrad-kramer-reverse-engineering-ios-apps-lyft/
• "Jailbreak do iOS 8.1.2 e análise de exploits relacionados" http://proteaswang.blogspot.com/2017/04/jailbreak-ios-812-and-analyze-related.html
• "Atacando o kernel XNU no El Capitan" https://www.blackhat.com/docs/eu-15/materials/eu-15-Todesco-Attacking-The-XNU-Kernal-In-El-Capitain.pdf
• "Atirando no kernel do OSX El Capitan como um atirador de elite" https://speakerdeck.com/flankerhqd/shooting-the-osx-el-capitan-kernel-like-a-sniper
• "Os imbecis italianos estão de volta! O que eles estão aprontando desta vez?" https://reverse.put.as/2016/02/29/the-italian-morons-are-back-what-are-they-up-to-this-time/
• "A jornada de uma escalada de privilégios completa no OSX com uma única vulnerabilidade - Parte 1" http://keenlab.tencent.com/en/2016/07/29/The-Journey-of-a-complete-OSX-privilege-escalation-with-a-single-vulnerability-Part-1/
• "O heap do kernel do iOS 10 revisitado" http://gsec.hitb.org/materials/sg2016/D2%20-%20Stefan%20Esser%20-%20iOS%2010%20Kernel%20Heap%20Revisited.pdf
• "Quem precisa de kernels decriptografados afinal?" http://blog.offcellresearch.com/security/apple/ios/kernel/2016/08/23/who-needs-decrypted-kernels-anyways.html
• "Escalada de privilégios no Mac OS X via Use-After-Free: CVE-2016-1828" https://bazad.github.io/2016/05/mac-os-x-use-after-free/
• "Vulnerabilidade do kernel iOS PEGASUS explicada" http://sektioneins.de/en/blog/16-09-02-pegasus-ios-kernel-vulnerability-explained.html
• "Nos bastidores da segurança do iOS" https://www.blackhat.com/docs/us-16/materials/us-16-Krstic.pdf
• "O sandbox da Apple: Mais fundo no pântano" https://www.youtube.com/watch?v=mG715HcDgO8
• “Um mergulho profundo nos diversos sabores de IPC disponíveis no OS X.” https://vimeo.com/127859750
• "Análise do jailbreak do iOS 9.3.3 e melhorias de segurança do iOS 10" http://powerofcommunity.net/poc2016/pangu.pdf
• "Maçãs fritas: Jailbreak faça você mesmo" https://speakerdeck.com/mbazaliy/fried-apples-jailbreak-diy
• "Engenharia reversa de uma extensão de kernel do macOS" (DSMOS) http://lightbulbone.com/2016/10/04/intro-to-macos-kernel-debugging.html
• "Desmistificando o Secure Enclave Processor" http://mista.nu/research/sep-paper.pdf
• "Aproveitando o motor de jogo da Apple para detectar ameaças no macOS" https://objectivebythesea.com/v1/talks/OBTS_v1_Malm_Stein.pdf
• "Fique à vontade com a auditoria OpenBSM" https://objective-see.com/talks/Wardle_ShmooCon2018.pdf
• "Auditoria em tempo real no macOS com OpenBSM" https://meliot.me/2017/07/02/mac-os-real-time-auditing/

Desenvolvimento de extensão de kernel (KEXT)

• "Controles e notificações de KEXT" https://developer.apple.com/library/content/documentation/Darwin/Conceptual/NKEConceptual/control/control.html
• "Referência de extensões de kernel de rede" https://developer.apple.com/library/content/documentation/Darwin/Conceptual/NKEConceptual/reference/reference.html#//apple_ref/doc/uid/TP40001858-CH232-BBAGGGED
• "Trabalhando com TrustedBSD no Mac OS X" https://sysdev.me/trusted-bsd-in-osx/
• "CONSTRUINDO UM MÓDULO DE KERNEL APPLE OSX COM CMAKE – C/C" http://www.goodbits.ca/index.php/2017/09/25/building-an-apple-osx-kernel-module-with-cmake-cc/
• "Depurando o kernel do macOS usando VirtualBox" https://klue.github.io/blog/2017/04/macos_kernel_debugging_vbox/
• "Depuração remota de KEXT" https://rednaga.io/2017/04/09/remote_kext_debugging/
• "Introdução à depuração de kernel do macOS" https://lightbulbone.com/posts/2016/10/intro-to-macos-kernel-debugging/
• "Depuração de kernel com LLDB e VMWare Fusion" http://ddeville.me/2015/08/kernel-debugging-with-lldb-and-vmware-fusion
• "Monitorando a criação de processos via kernel (Parte I)" https://objective-see.com/blog.html#blogEntry9
• "Monitorando a criação de processos via kernel (Parte II)" https://objective-see.com/blog/blog_0x0A.html
• "Monitorando a criação de processos via kernel (Parte III)" https://objective-see.com/blog/blog_0x0B.html
• "Monitorando o macOS, Parte I: Monitorando a execução de processos via MACF" https://www.fortinet.com/blog/threat-research/monitoring-macos--part-i--monitoring-process-execution-via-macf.html
• "Monitorando o macOS, Parte II: Monitorando eventos do sistema de arquivos e carregamento de dylibs via MACF" https://www.fortinet.com/blog/threat-research/monitor-file-system-events-and-dylib-loading-via-macf-on-macos.html
• "Monitorando o macOS, Parte III: Monitorando atividades de rede usando filtros de socket" https://www.fortinet.com/blog/threat-research/monitoring-macos--part-iii--monitoring-network-activities-using-.html
• "Um sistema de lista branca/lista negra binária para Mac OS X" https://github.com/google/santa

Outros

• "O Python morde sua maçã - fuzzing e exploração de bugs do kernel OSX" https://speakerdeck.com/flankerhqd/the-python-bites-your-apple-fuzzing-and-exploiting-osx-kernel-bugs
• "Artefatos e truques para Mac OS X" http://sud0man.blogspot.fr/2015/05/artefacts-for-mac-os-x.html?m=1
• "Coleção de locais de artefatos forenses para Mac OS X e iOS" https://github.com/pstirparo/mac4n6
• "Novos artefatos forenses do macOS Sierra (10.12) – Apresentando o Unified Logging" https://www.mac4n6.com/blog/2016/11/13/new-macos-sierra-1012-forensic-artifacts-introducing-unified-logging
• "Uma lista selecionada de comandos de shell e ferramentas específicos do OS X" https://github.com/herrbischoff/awesome-osx-command-line
• "Guia de segurança e privacidade do OS X" https://github.com/drduh/OS-X-Security-and-Privacy-Guide
• "Um tutorial sobre launchd" http://launchd.info/
• https://objective-see.com/index.html
• "Ferramenta de introspecção malloc para OS X" https://github.com/blankwall/MacHeap
• "Guia de hardening do macOS" http://newosxbook.com/files/moxii3/AppendixA.pdf por Jonathan Levin
• "Checkout4Mac" http://sud0man.blogspot.sk/2016/10/new-version-of-checkout4mac-02.html
• "Fuzzer de kernel OSX" https://github.com/SilverMoonSecurity/PassiveFuzzFrameworkOSX
• "Instrumentação iOS sem jailbreak" https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2016/october/ios-instrumentation-without-jailbreak/
• "Monitoramento do macOS do jeito open source" https://blogs.dropbox.com/tech/2018/04/4696/
• "Mac OS X El Capitan (10.11) e task_for_pid()" https://attilathedud.me/mac-os-x-el-capitan-10-11-and-task_for_pid/

Crackmes e desafios

• https://reverse.put.as/crackmes/
• Seção "Exercícios" em http://beginners.re/Reverse_Engineering_for_Beginners-en.pdf

Livros

• "The Mac Hacker's Handbook" por Charlie Miller, Dino Dai Zovi
• "Mac OS X and iOS Internals: To the Apple's Core" por Jonathan Levin
• "Mac OS X Internals: A Systems Approach" por Amit Singh
• "iOS App Reverse Engineering" https://github.com/iosre/iOSAppReverseEngineering
• "iOS Hacker's Handbook" por Charlie Miller, Dion Blazakis, Dino Dai Zovi, Stefan Esser, Vincenzo Iozzo, Ralf-Philip Weinmann
• "Hacking and Securing iOS Applications" por Jonathan Zdziarski