Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Fire & Ice - Making and Breaking macOS Firewalls

Black Hat via YouTube

Overview

Explore the intricacies of macOS firewall development and vulnerabilities in this 25-minute Black Hat conference talk. Dive into core concepts like kernel-level socket filtering, user-mode component communication, secure privileged code installation, and self-defense mechanisms implementation. Learn about firewall vulnerabilities, including methods to bypass Lulu, generic bypasses, DNS and browser exploitation, and kernel-based bypasses. Gain insights from security expert Patrick Wardle as he covers topics such as registering socket filters, implementing callbacks, and protecting the UI from synthetic events. Enhance your understanding of macOS security through this comprehensive exploration of firewall creation and exploitation techniques.

Syllabus

Intro
Outline
The Goal
Registering a Socket Filter
Socket Filter Callbacks
Firewall Vulnerabilities
Bypassing Lulu
Generic Bypasses
Abusing DNS
Abusing Browsers
Kernel-based Bypasses
Finale

Taught by

Black Hat

Reviews

Start your review of Fire & Ice - Making and Breaking macOS Firewalls

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.