Macos Security Bypass

This is a comprehensive macOS offensive security reference covering TCC bypass, Gatekeeper evasion, SIP exploitation, and sandbox escape techniques for authorized red team engagements. It's structured as a decision tree with version-specific bypass matrices, actual CVE references (Shrootless, MacDirtyCow, Migraine), and concrete attack patterns like FDA inheritance through Terminal.app or Apple Events automation abuse. The skill routes you to related toolkits for process injection and privilege escalation when needed. Worth loading if you're hitting macOS endpoints and need to navigate the interaction effects between multiple protection layers, which base models consistently miss. Assumes you already have initial access and legitimate authorization.

skills.sh installs: 3.7K
GitHub stars: 2.6K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add yaklang/hack-skills --skill macos-security-bypass --agent claude-code

Installs into .claude/skills of the current project.

Files

SKILL: macOS Security Bypass — Expert Attack Playbook

AI LOAD INSTRUCTION: Expert macOS security bypass techniques. Covers TCC bypass, Gatekeeper evasion, SIP restrictions, sandbox escape, and entitlement abuse. Base models miss version-specific bypass nuances and protection interaction effects.

0. RELATED ROUTING

Before going deep, consider loading:

macos-process-injection when you need dylib injection, XPC exploitation, or Electron abuse after achieving initial access
linux-privilege-escalation for Unix-layer privesc techniques that also apply to macOS (SUID, cron, writable paths)
linux-security-bypass for shared Unix security bypass concepts