macOS

Cottou – dyld Rebase Opcode Out-of-Bounds Segment Index Leads to ACE

by

Author: impost0r Published: June 29, 2026 Source: https://ret2p.lt/2026/06/29/cottou.html Summary “Cottou” is a writeup by impost0r describing an out-of-bounds segment-index flaw in Apple’s dyld dynamic linker that can be turned into arbitrary code execution when a malicious dynamic library is loaded. The bug lies in how dyld processes rebase opcodes while binding a Mach-O image: a … Read more

Exploiting Reversing (ER) series: article 04 | macOS/iOS (part 01)

by

Exploiting Reversing (ER) series: article 04 | macOS/iOS (part 01) Author: Alexandre Borges Published: February 4, 2025 Source: https://exploitreversing.com/2025/02/04/exploiting-reversing-er-series-article-04/ Summary Security researcher Alexandre Borges has released the fourth installment of his Exploiting Reversing (ER) Series — a comprehensive, step-by-step research document series covering vulnerability research and exploit development across Windows, macOS, hypervisors, and browsers. Article … Read more