BundleLoader. BundleLoader demonstrates how to load a mach-o bundle from memory, and call a function from it. This can be useful for creating module systems for malware on Mac OS X. NOTE: THIS METHOD IS NO LONGER FILELESS ON UPDATED MACOS. Dyld writes files loaded using the OS provided APIs to tmp, then calls the file based loaders on them now.

github.com/xpcmdshell/BundleLoader

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

No recent activity.