Stable 00 Bypassing MacOS Detections With Swift

Explore techniques for bypassing MacOS detections using Swift in this 25-minute conference talk from Derbycon 2019. Delve into Cedric Owens' expertise as he covers command line processes, MacShell, blue team analysis, and developer notes. Learn about invoking API calls, creating fake authentication prompts, and utilizing Cocoa API and Apple Script. Discover how to use Xcode, implement sandboxing, and add code behind elements and app windows. Gain insights into Python code integration and access resources on GitHub to enhance your understanding of MacOS security bypasses.

Introduction
Cedrics Background
Outline
State of the Union
Command Line Processes
MacShell
BlueTeam Analysis
Pros and Cons
Developer Notes
Invoke API Calls
Challenge Yourself
Getting Started
Xcode
ToolMax
Socket
Fake authentication prompts
Cocoa API
NS Apple Script
AmIMyMac
File Manager
Command Line
Using Xcode
Sandboxing
Sandbox Example
Adding Code Behind Elements
Adding Code Behind App Window
App Fill
Running Short on Time
Python Code
GitHub