PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

LLDBagility: practical macOS kernel debugging

blog.quarkslab.com | research | #macos | #virtualbox | #kernel | #debugging | #xnu | #lldb
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Presents LLDBagility, which attaches LLDB to a VirtualBox macOS VM via the Fast Debugging Protocol for kernel breakpoints, watchpoints and pause — no debug kernel or SIP changes needed.
Published
Collected

Related coverage

research · blog.quarkslab.com
An overview of macOS kernel debugging
First of two posts on macOS kernel debugging: kernel debugger fundamentals, how debugging is implemented for XNU, and the limitations of current tooling (debug kernel builds, no watchpoints).
blog · projectzero.google
task_t considered harmful
A Project Zero deep dive into a design flaw around task_t in the XNU kernel, demonstrating sandbox escapes and privilege escalation and how each mitigation was defeated.
research · calif.io
[CVE-2026-28825] An Apple Kernel Bug, Brought to You by Microsoft
# An Apple Kernel Bug, Brought to You by Microsoft Autonomous N-day analysis of CVE-2026-28825. Josh Maine and Bruce Dang April 22, 2026 applemadbugs Contents 1. The setup 2. The vulnerability 3....
blog · projectzero.google
Deja-XNU
This blog post revisits an old bug found by Pangu Team and combines it with a new, albeit very similar issue I recently found to try to build a "perfect" exploit for iOS 7.1.2.
vulnerability · projectzero.google
[CVE-2017-2370] Exception-oriented exploitation on iOS
A Project Zero write-up on discovering and exploiting CVE-2017-2370, a heap buffer overflow in an iOS mach trap, using deliberate crashes to build a working exploit.
research · blog.quarkslab.com
Linux kernel instrumentation from Qemu and Gdb
A tutorial on instrumenting the Linux kernel from QEMU and GDB: using a hypervisor for stealthy analysis, plus GDB scripting and kernel helper tools to monitor syscalls, processes and modules.
Back