corpus.blog
41,554 blogs · 4,969,865 posts Claim your blog
Record · corpus.blog/posts/01a0b68a-1f9a-7243-aa5e-729872d1895f

Restoring Reflective Code Loading on macOS

objective-see.org · published 16 December 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at objective-see.org Wayback capture
1blogs citing
First cited
14 Sept 2025
Most recent
17 Dec 2025
Rank this month
not ranked
External links
22
Words captured
5,038

Cited by

Blog
In the post
Date
oliviagallucci.com
EDR Evasion with Lesser-Known Languages & macOS APIs Read at the source ↗
17 Dec 2025
oliviagallucci.com
Why Packers are Rare and Sus on macOS Read at the source ↗
14 Sept 2025

Links from this post

Link
Host
https://attack.mitre.org/techniques/T1620/
attack.mitre.org
https://support.apple.com/guide/deployment/system-extensions-in-macos-depa5fb8376f/web
support.apple.com
https://developer.apple.com/library/archive/samplecode/MemoryBasedBundle/Introduction/Intro.html
developer.apple.com
https://www.amazon.com/Mac-Hackers-Handbook-Charlie-Miller/dp/0470395362/
amazon.com
https://threatvector.cylance.com/en_us/home/running-executables-on-macos-from-memory.html
threatvector.cylance.com
https://github.com/CylanceVulnResearch/osx_runbin
github.com
https://t.co/rAsK4xqSBh
t.co
https://twitter.com/daveaitel/status/850039542698708992?ref_src=twsrc%5Etfw
twitter.com
https://taomm.org/vol1/pdfs/CH%2010%20EvilQuest's%20Infection,%20Triage,%20and%20Deobfuscation.pdf
taomm.org
https://taomm.org/vol1/pdfs/CH%2011%20EvilQuest's%20Persistence%20and%20Core%20Functionality.pdf
taomm.org
https://twitter.com/2igosha/status/1434588473655271424?ref_src=twsrc%5Etfw
twitter.com
https://github.com/apple-oss-distributions/dyld/blob/3f24a36068a96722cf3acbd5087983ce658e9d70/dyld3/APIs_macOS.cpp
github.com
https://t.co/ALyFKSGRco
t.co
https://twitter.com/patrickwardle/status/1547967373264560131?ref_src=twsrc%5Etfw
twitter.com
https://twitter.com/attrc/status/1547969492801560577?ref_src=twsrc%5Etfw
twitter.com
Restoring Dyld Memory Loading Read at the source ↗
blog.xpnsec.com
https://speakerdeck.com/patrickwardle/mirror-mirror-restoring-reflective-code-loading-on-macos
speakerdeck.com
https://github.com/octoml/macho-dyld
github.com
https://t.co/oHNlxMQrhd
t.co
https://t.co/vDuXLs6LXD
t.co
https://t.co/f3fP9oYesS
t.co
https://github.com/pwardle/ReflectiveLoader
github.com
Elsewhere on objective-see.org (3)