domains / families / security / macos-security-bypass

macos-security-bypass

separate

macOS security bypass playbook. Use when targeting macOS endpoints and need to bypass TCC, Gatekeeper, SIP, sandbox, code signing, or entitlement-based protections during authorized red team or pentest engagements.

When to use

• TCC bypass
• Gatekeeper evasion
• SIP restrictions
• sandbox escape
• entitlement abuse
• code signing bypass

When not to use

• dylib injection
• XPC exploitation
• Electron abuse
• Unix-layer privesc techniques
• shared Unix security bypass concepts

Skill page

Source