OpenRG partition utility to parse, extract, and create new partition files

Exploit code for CVE-2016-1757

A small tool to dynamically disable and enable SIP in El Capitan

Implementation of kexstat via /dev/kmem with kernel ASLR support

A kernel extension to mitigate Gatekeeper bypasses

A TE executable format loader for IDA

A OS X crypto ransomware PoC

A small utility to read and write to Macs physical memory using default AppleHWAccess.kext.

The kernel component of rootpipe fix for Mavericks

The userland component of rootpipe fix for Mavericks

Bypass Google's Santa

OS X rootkit loader version #1

OS X rootkit loader version #2

MPRESS dumper for OS X

Some improvements to Apple's otool.

A TrustedBSD module to control execution of binaries with suid bit set

iTunes plugin to disable creation of m3u playlists

Anti Hacking Team TrustedBSD module

small utility to dump kernel memory

Small util to dump the IDT table of a running OS X system with kmem enabled

Fixed kgmacros to work with VMware kernel gdb stub

Scripts and other material related to OS.X/Crisis malware analysis

Apple's gdb fork with some fixes and enhancements

A small OS X/iOS userland util to dump processes memory

A kernel extension and userland daemon to patch applications

Random collection of IDA's IDC scripts

fG!'s crackme #1 source code

A PoC Mach-O infector via library injection