macos-reverse
ZHFind what macOS binaries and apps really do.
What it does
Analyzes macOS binaries and app bundles to produce signing-status and address- or symbol-level findings.
When to use it
Use for authorized macOS and Mach-O reverse engineering, including signing, Objective-C or Swift recovery, and malware analysis.
How to use it
Give it a macOS binary or app bundle; it analyzes signing and loading information, then static and dynamic behavior, and reports findings.
What you provide
- Your files
Uses
What you need · 2
The workflow uses macOS system-provided binary inspection and signing tools.
Pairs macOS malware analysis with malware-analysis and routes general samples to it; whether installation is required is unstated.
Access · 2
This skill
macOS filesystem activity
Observes macOS filesystem activity
macOS system logs
Reads macOS system logs