Wojciech is a Principal Security Specialist working at SecuRing. He specializes in application security on Apple devices. He created the iOS Security Suite – an opensource anti-tampering framework. Bugcrowd MVP, found vulnerabilities in Apple, Facebook, Malwarebytes, Slack, Atlassian, and others. In free time he runs an infosec blog. Shared research on among others Black Hat (Las Vegas, USA), Objective by the Sea (Hawaii, USA), AppSec Global (Tel Aviv, Israel), TyphoonCon (Seoul, South Korea), NULLCON (Goa, India), CONFidence (Cracow, Poland).

macOS Red Teaming in 2023 [0-day edition]

Do you have Macs in your company’s infrastructure? Nowadays, I bet that in most cases the answer would be YES. 

Macs stopped be computers only used in startups. We can observe them even in huge legacy environments in banks and other corporations. 

The problem is that they are usually not symmetrically secured, comparing to the rest of Windows stations. Macs are not immune, they can be insecurely configured and now… even Apple admits that malware is present on Macs. 

In this presentation I will: 

• Introduce you to macOS security mechanisms 
• Perform step by step macOS infection basing on my 0-day (live demo) 
• Show you post exploitation techniques 
• Attack installed apps and collect data from them 
• Give recommendations on how to harden your Mac and macOS infrastructure