/topics/apple-security-research
Apple & macOS security
App Sandbox, TCC, entitlements, XPC, Endpoint Security, and shared container boundaries across macOS, iOS, and WebKit.
Full topic archive
Every matching record.
Methods and named-vulnerability research remain visually and editorially separate.
Field notes 2
Pentest · Nov 9, 2026
iOS Application Security in Practice: Auditing 30 OWASP MASVS Vulnerabilities with Frida and LLDB
Hands-on iOS penetration testing and secure coding: auditing Keychain misuse, bypassing client-side biometric checks with Frida, defeating SSL pinning, and mapping 30 real-world vulnerabilities to OWASP MASVS v2.
8 min read ↗macOS Security · Nov 9, 2026macOS Hardening in Practice: Auditing 54 Controls, Detecting Drift, and Remediating Without Dependencies
A deep dive into macOS endpoint security architecture: auditing SIP, Gatekeeper, TCC, LaunchDaemons, BPF packet filters, and plaintext secret leakage using native Zsh primitives, zero third-party dependencies, and OASIS SARIF v2.1.0.
9 min read ↗