Macos Security Bypass

This is a comprehensive macOS offensive security reference covering TCC bypass, Gatekeeper evasion, SIP exploitation, and sandbox escape techniques for authorized red team engagements. It's structured as a decision tree with version-specific bypass matrices, actual CVE references (Shrootless, MacDirtyCow, Migraine), and concrete attack patterns like FDA inheritance through Terminal.app or Apple Events automation abuse. The skill routes you to related toolkits for process injection and privilege escalation when needed. Worth loading if you're hitting macOS endpoints and need to navigate the interaction effects between multiple protection layers, which base models consistently miss. Assumes you already have initial access and legitimate authorization.