Igor Delovski Board

[Ike]

sudonull.com - The basics of working with IOKit. Subtleties of driver programming

"IOKit was previously written in Objective-C, like the Cocoa framework, and
was called the Driver Kit. However, to simplify the development of drivers by
3 persons, the Driver Kit was rewritten in C ++. However, according to one
of the main developers of IOKit, Godfrey van der Linden, this decision was
erroneous. However, in IOKit, you can see with an unaided glance the legacy
of Objective-C, for example, link counting and retain / release mechanisms,
class naming (OS and IO prefixes), class method naming, and much more."

[Ike]

sciencedirect.com - Kernel Extension

Excerpts from:

- Host Integrity Monitoring Using Osiris and Samhain, 2005

- Enrico Perla, Massimiliano Oldani, in A Guide to Kernel Exploitation, 2011

- Jaron Bradley, in OS X Incident Response, 2016

- Chris Hurley, ... Brian Baker, in WarDriving and Wireless Penetration Testing, 2007

[Ike]

se - How can I install USB Prober from the Developer SDK on Mac OS X?

"All of those warnings that come with USB Prober scared me away. Instead, I
used IORegistryExplorer, and it works fine for me in OS X 10.10.2."

[Ike]

insanelymac - Trying to copy 2 kexts from a USB to my Extensions folder

[Ike]

git - joevt/KextUtil.sh

checkkext, unloadkext, installkext...

[Ike]

A Mutable Log - Access USB device on Mac OS X using I/O Kit

"This post shows how you can access a USB device from user space on Mac
OS X. I used Xcode 4.3.2 on Mac OS X Lion (10.7.3) for testing the code.

Apple provides the USB Device Interface Guide that shows how USB devices
can be accessed from user space. The book OS X and iOS Kernel Programming
is also very helpful, see Chapter 15 - User-Space USB Drivers."

[Ike]

git - BlackHole: Audio Loopback Driver

"BlackHole is a modern macOS virtual audio loopback driver that allows
applications to pass audio to other applications with zero additional latency."

Installer & Uninstaller scripts