Objective-See Foundation Courses

Queen B - Apple Compressor 0-click RCE

Discover how to exploit Apple Compressor's 0-click RCE vulnerability through reverse engineering, network protocol analysis, and sandbox bypass techniques in this security research presentation.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Placeboed Apples - A New Way to Hunt Spyware on iOS

Discover innovative malware simulation techniques to detect iOS spyware by mimicking known threats, identifying forensic indicators, and transforming chaotic data into focused investigations.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Hook, Line and Koi Stealer - New macOS Malware in DPRK Fake Job Interviews

Uncover DPRK-linked macOS malware targeting crypto developers through fake job interviews, analyzing Koi Stealer's sophisticated AppleScript tactics and C2 communication methods.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Something from Nothing - Exploiting Memory Zeroing in XNU

Explore XNU virtual memory vulnerabilities and learn how to exploit memory zeroing issues to achieve root access on macOS through detailed technical analysis.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

From Bits to Behavior - Detecting macOS Command and Control Through Statistical Analysis

Uncover statistical methods to detect macOS command & control communication by analyzing log patterns, timing irregularities, and implementing detection using OSQuery and Filebeat.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

What's at the Bottom of the Sea, One Baseband? - Diving into the C1

Dive into Apple's first in-house C1 baseband architecture, comparing it to Qualcomm/Intel designs while exploring security features and automated carrier profile monitoring tools.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Trust Me, I'm an Apple Watch - On Protocol Reversing, Mimicry, and Data Exfiltration

Discover how to reverse-engineer Apple Watch protocols, perform Bluetooth hacking, and execute data exfiltration by mimicking trusted devices in Apple's ecosystem.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Revoked, Not Dead - When CDHash Revocation Fails to Kill

Uncover how macOS malware bypasses Apple's CDHash revocation system, enabling execution of explicitly blocked apps through Gatekeeper flaws and runtime enforcement weaknesses.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

macOS Privilege Escalation Via Traceroute6

Discover how to exploit four chained vulnerabilities in macOS for user-to-root privilege escalation, covering DNS interception, ASLR bypass, and PAC mitigation techniques.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Introducing the Next Generation of Mac Monitor

Discover the evolution of Mac Monitor, an open-source macOS security tool leveraging Apple's Endpoint Security APIs for system activity analysis and threat detection prototyping.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Who Cares Where Waldo Is - Locating macOS Users Without Their Consent

Uncover macOS location privacy vulnerabilities and learn how attackers can bypass consent mechanisms to track users through system weaknesses and third-party apps.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Crash One - A Starbucks Story - CVE-2025-24277 Exploit Development

Discover how two researchers developed a macOS exploit over coffee, covering sandbox escapes, XPC calls, ACL inheritance, and race conditions to achieve privilege escalation.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

macOS Internals for Threat Detection Engineers

Explore macOS security telemetry through ULS, ESF, and TCC.db to detect threats like Atomic Stealer using behavioral analysis and specialized tools for hardening environments.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

The Power of Powerlogs - Apple Device Forensic Analysis

Unlock the forensic potential of Apple's Powerlogs database with 600+ tables revealing user activity, travel patterns, apps, and system states across all Apple devices.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Unpacking the iOS Sandbox

Discover how iOS sandbox security works by revamping decompilation tools to reveal sandbox rules, structure, and real-world security implications for enhanced research capabilities.

• YouTube
• 21 minutes
• Self-Paced
• Free Video