PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

An overview of macOS kernel debugging

blog.quarkslab.com | research | #reverse-engineering | #macos | #kernel | #debugging | #tooling | #xnu
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

First of two posts on macOS kernel debugging: kernel debugger fundamentals, how debugging is implemented for XNU, and the limitations of current tooling (debug kernel builds, no watchpoints).
Published
Collected

Related coverage

research · blog.quarkslab.com
LLDBagility: practical macOS kernel debugging
Presents LLDBagility, which attaches LLDB to a VirtualBox macOS VM via the Fast Debugging Protocol for kernel breakpoints, watchpoints and pause — no debug kernel or SIP changes needed.
blog · projectzero.google
task_t considered harmful
A Project Zero deep dive into a design flaw around task_t in the XNU kernel, demonstrating sandbox escapes and privilege escalation and how each mitigation was defeated.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · calif.io
[CVE-2026-28825] An Apple Kernel Bug, Brought to You by Microsoft
# An Apple Kernel Bug, Brought to You by Microsoft Autonomous N-day analysis of CVE-2026-28825. Josh Maine and Bruce Dang April 22, 2026 applemadbugs Contents 1. The setup 2. The vulnerability 3....
research · volexity.com
Go Get ‘Em: Updates to Volexity Golang Tooling
# Go Get ‘Em: Updates to Volexity Golang Tooling August 11, 2025 Ivan Mladenov _This blog post was the final deliverable for asummer internship project, which was completed under the direction of...
research · eshard.com
Fine-tuned Windows scenarios: debugger-assisted recording with WinDbg
Software Security ### Power your investigations with esReverse ✨ Keep your data safe with private LLM. PLATFORM esReverse AI-powered Reverse Engineering TOOLS Time Travel Debugging Epoch SERVICES...
Back