Objective-See Foundation Courses

Trust Me, I'm an Apple Watch - On Protocol Reversing, Mimicry, and Data Exfiltration

Discover how to reverse-engineer Apple Watch protocols, perform Bluetooth hacking, and execute data exfiltration by mimicking trusted devices in Apple's ecosystem.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Revoked, Not Dead - When CDHash Revocation Fails to Kill

Uncover how macOS malware bypasses Apple's CDHash revocation system, enabling execution of explicitly blocked apps through Gatekeeper flaws and runtime enforcement weaknesses.

• YouTube
• 27 minutes
• On-Demand
• Free Video

macOS Privilege Escalation Via Traceroute6

Discover how to exploit four chained vulnerabilities in macOS for user-to-root privilege escalation, covering DNS interception, ASLR bypass, and PAC mitigation techniques.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Introducing the Next Generation of Mac Monitor

Discover the evolution of Mac Monitor, an open-source macOS security tool leveraging Apple's Endpoint Security APIs for system activity analysis and threat detection prototyping.

• YouTube
• 21 minutes
• On-Demand
• Free Video

Who Cares Where Waldo Is - Locating macOS Users Without Their Consent

Uncover macOS location privacy vulnerabilities and learn how attackers can bypass consent mechanisms to track users through system weaknesses and third-party apps.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Crash One - A Starbucks Story - CVE-2025-24277 Exploit Development

Discover how two researchers developed a macOS exploit over coffee, covering sandbox escapes, XPC calls, ACL inheritance, and race conditions to achieve privilege escalation.

• YouTube
• 21 minutes
• On-Demand
• Free Video

macOS Internals for Threat Detection Engineers

Explore macOS security telemetry through ULS, ESF, and TCC.db to detect threats like Atomic Stealer using behavioral analysis and specialized tools for hardening environments.

• YouTube
• 22 minutes
• On-Demand
• Free Video

The Power of Powerlogs - Apple Device Forensic Analysis

Unlock the forensic potential of Apple's Powerlogs database with 600+ tables revealing user activity, travel patterns, apps, and system states across all Apple devices.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Unpacking the iOS Sandbox

Discover how iOS sandbox security works by revamping decompilation tools to reveal sandbox rules, structure, and real-world security implications for enhanced research capabilities.

• YouTube
• 21 minutes
• On-Demand
• Free Video

Beyond Static Labels - A Behavioral Framework for macOS Grayware Classification

Explore a behavioral framework for classifying macOS grayware beyond static labels, examining deception, persistence, and monetization traits through Adload family analysis.

• YouTube
• 23 minutes
• On-Demand
• Free Video

Breaking the Sound Barrier - Exploiting CoreAudio via Mach Message Fuzzing

Discover how to exploit macOS CoreAudio vulnerabilities through structured Mach message fuzzing, API call chaining, and sandbox escape techniques for privilege escalation.

• YouTube
• 51 minutes
• On-Demand
• Free Video

Reverse Engineering Apple Security Updates

Discover how to reverse engineer Apple's security updates using automated tools and AI agents to transform opaque CVE fixes into concrete binary-level analysis and actionable intelligence.

• YouTube
• 33 minutes
• On-Demand
• Free Video

Sploitlight - Exploiting Spotlight to Bypass TCC on macOS

Discover how researchers exploited Spotlight plugins to bypass macOS TCC protections, exposing sensitive user data and Apple Intelligence vulnerabilities in this critical security analysis.

• YouTube
• 43 minutes
• On-Demand
• Free Video

What's New in Lockdown Mode?

Explore Apple's Lockdown Mode implementation through reverse engineering analysis, uncovering protected apps, daemons, and attack vectors it mitigates against zero-click exploits.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Using Type Metadata from Swift Binaries

Explore Swift binary analysis techniques by understanding type metadata, runtime systems, and reflection capabilities for enhanced iOS app security research.

• YouTube
• 24 minutes
• On-Demand
• Free Video