Snake&Apple III — Checksec

Karol Mazurek
15 min readJan 6, 2024

Detecting exploit mitigation in Mach-O binaries using Python.

INTRO

Welcome to another article in the series on macOS security internals!

This time, I will discuss the various binary protections on macOS. You will learn here how to detect these protections and assess whether they are configured securely or not. You can see a summary of the article below:

Towards the end, I will share my custom implementation of a well-known checksec tool, but for macOS. You can see its final output below:

Please note that some topics have been intentionally omitted and will be addressed in future articles. However, leave a comment if you have any questions or need clarification about anything written here while reading. I guarantee a response and will use your feedback for future articles.

The Snake&Apple III. Checksec repository contains all of the code used.

PIE — Position-Independent Executable

--

--

Karol Mazurek
Karol Mazurek

No responses yet