Cyber Risks · Cisco Talos

Talos releases new macOS open-source fuzzer

Summary: Cisco Talos released an open-source snapshot fuzzer that adapts Axel Souchet's WTF project to target closed-source macOS and its kernel, using VMware Fusion's GDB stub and snapshot files to capture and restore machine state. The tool runs on existing hardware via the Bochs x86 emulator, is limited to macOS on Intel hardware, and was demonstrated against the kernel's ip6_input IPv6 packet entry point.

What you should know: macOS kernel code is closed-source and runs on Apple hardware, so most teams cannot instrument it or fuzz it on commodity servers; Talos's approach sidesteps both constraints by snapshotting a VM and restoring only its state, which puts kernel-level macOS testing within reach of a standard Linux or Windows machine.

Read the original at Cisco Talos ↗

Topics
Malware
Related