Skip to content
Intego X9: Why your macOS antivirus should not trust PIDs
blog.quarkslab.com | research | #vulnerability-research | #privilege-escalation | #ghidra | #macos | #race-condition | #frida | #intego | #xpc
Summary
Part two of Quarkslab's Intego series: combining Ghidra static analysis with Frida tracing to show how a PID reuse race can bypass XPC authentication checks on privileged macOS services.
- Published
- Collected