Record · corpus.blog/posts/01a0bdc9-34fe-7008-846e-b93dae1bc9ad

Why Packers are Rare and Sus on macOS

oliviagallucci.com · published 14 September 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at oliviagallucci.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 36
Words captured: 2,778

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://upx.github.io

upx.github.io

https://www.autohotkey.com/mpress/mpress_web.htm

autohotkey.com

https://attack.mitre.org/techniques/T1027/002/

attack.mitre.org

https://support.apple.com/en-lamr/guide/security/sec5599b66df/web

support.apple.com

https://developer.apple.com/documentation/security/notarizing-macos-software-before-distribution

developer.apple.com

https://support.apple.com/en-lamr/guide/security/sec3ad8e6e53/web

support.apple.com

https://help.apple.com/xcode/mac/current/en.lproj/devbbdc5ce4f.html

help.apple.com

https://developer.apple.com/streaming/fps/

developer.apple.com

https://book.hacktricks.wiki/en/macos-hardening/macos-security-and-privilege-escalation/macos-security-protections/macos-amfi-applemobilefileintegrity.html

book.hacktricks.wiki

https://developer.apple.com/documentation/storekit/validating-receipts-with-the-app-store

developer.apple.com

https://github.com/packing-box/awesome-executable-packing

github.com

Tearing Apart the Undetected (OSX)Coldroot RAT Read at the source ↗

objective-see.org

https://taomm.org/vol2/pdfs/CH%202%20Parsing%20Binaries.pdf

taomm.org

https://en.wikipedia.org/wiki/KeRanger

en.wikipedia.org

https://www.welivesecurity.com/2019/04/09/oceanlotus-macos-malware-update/

welivesecurity.com

https://www.sentinelone.com/blog/macos-payloads-7-prevalent-and-emerging-obfuscation-techniques/

sentinelone.com

https://github.com/progrium/darwinkit

github.com

https://github.com/iangcarroll/pakr

github.com

https://rtx.meta.security/post-exploitation/2022/12/19/In-Memory-Execution-in-macOS.html

rtx.meta.security

https://slyd0g.medium.com/understanding-and-defending-against-reflective-code-loading-on-macos-e2e83211e48f

slyd0g.medium.com

https://developer.apple.com/documentation/bundleresources/entitlements/com.apple.security.cs.allow-unsigned-executable-memory

developer.apple.com

https://sveinbjorn.org/platypus

sveinbjorn.org

https://medium.com/@travmath/understanding-the-mach-o-file-format-66cf0354e3f4

medium.com

https://github.com/upx/upx/issues/424

github.com

https://eclecticlight.co/2021/01/26/when-you-dont-have-permission-to-run-an-app-on-an-m1-mac/

eclecticlight.co

https://stackoverflow.com/questions/64842819/cant-run-app-because-of-permission-in-macos-v11-big-sur

stackoverflow.com

https://developer.apple.com/documentation/security/hardened-runtime

developer.apple.com

https://developer.apple.com/documentation/BundleResources/Entitlements/com.apple.security.cs.allow-jit

developer.apple.com

Restoring Reflective Code Loading on macOS Read at the source ↗

objective-see.org

https://developer.apple.com/documentation/security/disabling-and-enabling-system-integrity-protection

developer.apple.com

https://en.wikipedia.org/wiki/KeRanger%23Discovery

en.wikipedia.org

https://www.apple.com/certificateauthority/

apple.com

https://support.apple.com/en-lamr/guide/security/sec469d47bd8/web

support.apple.com

https://oliviagallucci.com/?post_type=post&p=75535

oliviagallucci.com

https://objective-see.org/tools.html

objective-see.org

Signature-based Analysis for Reversing Read at the source ↗

oliviagallucci.com