Level up your cyber skills game and
save 20% on a Learn One subscription
EXP-312: Advanced macOS Control Bypasses
OffSec’s Advanced macOS Control Bypasses (EXP-312) course provides a comprehensive understanding of macOS security and its inner workings. You’ll gain hands-on experience identifying and exploiting logic-based vulnerabilities within the operating system, learning to bypass security mechanisms and escalate privileges to ultimately gain root access on macOS systems.
Completion of the online training course and successfully passing the associated exam earns the OffSec macOS Researcher (OSMR) certification. This certification validates your expertise in macOS security and demonstrates your ability to analyze and exploit complex vulnerabilities, making you a highly sought-after professional in the field.
Topics covered in the Advanced macOS Control Bypasses course (EXP-312)
-
Introduction to macOS Internals
This module provides a foundation in macOS architecture, memory management, and system calls, essential knowledge for understanding macOS security and identifying potential vulnerabilities.
-
Debugging, Tracing & Hopper
Learn to utilize debugging and tracing tools like Hopper to analyze macOS applications and uncover security flaws.
-
Shellcoding in macOS
Master the art of writing shellcode for macOS, enabling you to execute custom code on compromised systems.
-
Dylib Injection
Explore techniques to inject dynamic libraries (dylibs) into macOS processes, allowing you to modify or extend their behavior.
-
Mach and Mach Injection
Understand the Mach microkernel, the core of macOS, and learn how to inject code into Mach tasks to bypass security restrictions.
-
Hooking
Learn how to intercept and modify function calls within macOS applications, enabling you to manipulate their behavior for offensive purposes.
-
XPC Exploitation
Understand XPC, an interprocess communication mechanism in macOS, and learn how to exploit XPC vulnerabilities to escalate privileges and gain unauthorized access.
-
Sandbox Escape
Explore techniques to break out of macOS sandboxes, which are designed to restrict the actions of untrusted applications.
-
Attacking Privacy (TCC)
Learn how to bypass Transparency, Consent, and Control (TCC), a macOS security feature that protects user privacy by requiring explicit consent for certain actions.
-
Symlink Attacks
Discover how to exploit symbolic links (symlinks) in macOS to gain unauthorized access to files and directories or escalate privileges.
How to enroll
Course + Cert
Exam Bundle
$1,649
One-time payment
More information
# of Courses
1
Days of lab access
90
# of Exam attempts included
1
20% off for a limited time
Learn
Unlimited
$5,799/year
Billed annually*
More information
# of Courses
1
1
All
Days of lab access
90
365
365
# of Exam attempts included
1
Fundamental content
N/A
PEN-103 & KLCP Exam
N/A
Included
Included
PEN-210 & OWSP Exam
N/A
Included
Included
N/A
Included
Included
Financing is now available through Climb Credit with as little as 0% APR and up to 36 monthly payments, excluding Learn Unlimited. State exclusions may apply. Learn more.
Once started, 90 day lab access cannot be paused.
Buying for a team?What our community is saying
cr7pt0pl4gu3
Security Researcher / Penetration Tester
I'm happy to announce that I've achieved the #OSMR certification!
Special thanks to @offsectraining and @theevilbit for arguably the best certification in the macOS infosec field.
Supercharge your cybersecurity career with the OSMR
Become an in-demand cybersecurity professional
-
Gain expertise in macOS control bypass techniques
Learn to identify and exploit vulnerabilities in the operating system’s protection mechanisms.
-
Get hands-on experience with real-world macOS vulnerability scanning
Practice bypassing security features on Mac computers and escalating privileges to achieve root access in a practical lab environment.
-
Understand macOS security concepts and methodologies
Learn about macOS internals, kernel programming, system programming, and exploit development techniques specific to the macOS platform.
-
Analyze and exploit macOS applications
Learn to identify and exploit logic-based vulnerabilities in macOS applications, including those related to XPC, sandboxing, and TCC (Transparency, Consent, and Control).
-
Harden your macOS security knowledge and skills
Develop a deep understanding of macOS security features and learn how to bypass them to effectively assess and improve the security of macOS systems.
Open doors to exciting cybersecurity roles
-
macOS Security Engineer
Design and implement security solutions tailored for macOS environments, protecting systems and data from unauthorized access and malicious activities.
-
macOS Security Consultant
Provide expert guidance to organizations on securing their macOS infrastructure, identifying vulnerabilities, and implementing effective countermeasures.
-
macOS Vulnerability Researcher
Discover and analyze new vulnerabilities in macOS and its applications, contributing to the security community’s knowledge base and helping to build more secure software.
-
Red Team Operator (macOS focus)
Emulate real-world attackers by targeting macOS systems, identifying weaknesses in security defenses, and providing actionable recommendations for improvement.
-
Incident Responder (macOS focus)
Investigate and respond to security incidents on macOS systems, analyzing compromised systems, identifying attack vectors, and implementing containment and remediation strategies.
FAQ
-
What is the OSMR exam?
The OffSec macOS Researcher (OSMR) exam is a challenging, proctored 48-hour assessment that simulates a real-world macOS environment. You will be tasked with identifying and exploiting vulnerabilities in macOS systems and applications, escalating privileges, and ultimately gaining root access.
-
What format is the OSMR exam in?
The OSMR exam is entirely hands-on. You will be given access to a target macOS environment and tasked with compromising it using the techniques learned in the course.
-
Who is the EXP-312 course for?
The EXP-312 course is ideal for experienced penetration testers and security professionals with a strong foundation in macOS security who are seeking to master advanced exploitation techniques and achieve a recognized macOS security certification – the OSMR certification.
-
What are the prerequisites for EXP-312?
While there are no formal prerequisites; however, a solid understanding of macOS internals, programming concepts (C and Objective-C), and debugging tools (such as LLDB) is highly recommended.
-
What are the hardware requirements for EXP-312?
M1 machine with at least 1TB SSD
-
What competencies will I gain?
Upon completing EXP-312 and passing the OSMR exam, you will have earned a recognized macOS security certification and mastered macOS security skills, including:
- In-depth knowledge of macOS internals, security mechanisms, and attack surfaces
- Ability to identify and exploit logic-based vulnerabilities in macOS applications and the operating system
- Proficiency in bypassing macOS security mitigations, such as sandboxing and TCC
- Understanding of kernel exploitation techniques and privilege escalation
- Ability to analyze and reverse engineer macOS applications to identify vulnerabilities
- Conducting comprehensive macOS penetration tests to assess security posture
-
How does OffSec support my online journey?
Throughout the online training course, you’ll have access to:
- A virtual lab environment for hands-on practice
- Extensive course information and materials, including videos and exercises
- A vibrant online community of students and OffSec professionals
-
What is the exam retake policy?
For details on exam retakes, please refer to OffSec’s official policies.
-
Can I extend my lab time?
For information on lab extensions, please refer to OffSec’s official policies.
OffSec Exploit Development Courses & Certifications
Advance your cybersecurity career with OffSec
-
Start your journey into macOS security
OffSec’s Advanced macOS Control Bypasses (EXP-312) course provides a comprehensive understanding of macOS security and its inner workings. You’ll gain hands-on experience identifying and exploiting logic-based vulnerabilities within the operating system.
-
Become a macOS security expert
Learn to bypass security mechanisms, escalate privileges, and ultimately gain root access on macOS systems. Master reverse engineering, exploit development, and vulnerability analysis techniques specific to macOS.
-
Enhance your cybersecurity expertise
OffSec’s additional Learning Paths and courses can further develop your exploit development security skill set. Explore Windows exploitation techniques, CI/CD attacks, and threat hunting with OffSec’s courses and Learning Paths.
-
Become an in demand cybersecurity professional
macOS security experts are highly sought-after professionals who assess and secure macOS environments, protecting systems and data from unauthorized access and malicious activities.
Start learning with OffSec
popular
Course + Cert
Exam Bundle
$1,649/once
The bundle includes 90 days of access to a single course, the associated labs and a single exam attempt.
Learn
One
$2,599/year*
$2,079/year*
One year of lab access alongside a single course plus two exam attempts.
access
Learn
Unlimited
$5,799/year*
Unlimited OffSec Learning Library access plus unlimited exam attempts for one year.
Learn
Enterprise
Get a quote
Flexible terms and volume discounts available.
New to cybersecurity want to get educated on fundamental content before signing up?
Check out Cyberversity - our free resource library covering essential cybersecurity topics.
Learn more