With Apple Silicon being heavily locked down when it comes to kernel debugging, how would one develop kernel exploits that require single-stepping and setting breakpoints?
I guess you could also write a kernel extension that allows inspecting memory, changing memory, setting breakpoints, etc. from a user-mode program using fcntl but if you stop the kernel, chances are user-mode locks up, too (might be guaranteed; I don’t know how much multi-threading there is in the MacOS kernel)
Someone•1h ago
I guess you could also write a kernel extension that allows inspecting memory, changing memory, setting breakpoints, etc. from a user-mode program using fcntl but if you stop the kernel, chances are user-mode locks up, too (might be guaranteed; I don’t know how much multi-threading there is in the MacOS kernel)