Agent skill · security · yaklang
macos-security-bypass
macOS security bypass playbook. Use when targeting macOS endpoints and need to bypass TCC, Gatekeeper, SIP, sandbox, code signing, or entitlement-based protections during authorized red team or pentest engagements.
Why this skill is useful
Adds detailed techniques and scripts for bypassing macOS security features that are not widely documented.
What it needs
About 7k tokens when loaded. Last updated 2026-06-16. 1,563 stars on the source repository.
What this skill does
SKILL: macOS Security Bypass — Expert Attack Playbook AI LOAD INSTRUCTION: Expert macOS security bypass techniques. Covers TCC bypass, Gatekeeper evasion, SIP restrictions, sandbox escape, and entitlement abuse. Base models miss version-specific bypass nuances and protection interaction effects. 0. RELATED ROUTING Before going deep, consider loading: macos-process-injection when you need dylib injection, XPC exploitation, or Electron abuse after achieving initial access linux-privilege-escalation for Unix-layer privesc techniques that also apply to macOS (SUID, cron, writable paths) linux-security-bypass for shared Unix security bypass concepts Advanced Reference Also load TCCBYPASSMATRIX.md when you need: Per-macOS-version TCC bypass mapping Protection-type-specific techniques (Camera, Microphone, FDA, Automation) MDM/configuration profile abuse patterns --- 1. TCC (TRANSPARENCY, CONSENT, CONTROL) OVERVIEW TCC is macOS's permission framework controlling access to sensitive resources (camera, microphone, contacts, full disk access, etc.). 1.1 TCC Database Locations Database Path Controls Protection --- --- --- --- User-level ~/Library/Application Support/com.apple.TCC/TCC.db Per-user consent decisions SIP-protected since Catalina System-level /Library/Application Support/com.apple.TCC/TCC.db System-wide consent decisions SIP-protected MDM-managed Via configuration profiles Push PPPC (Privacy Preferences Policy Control) Device management 1.2 TCC Bypass Categories Category Mechanism Typical Prerequisite --- --- --- FDA app exploitation Piggyback on apps already granted Full Disk Access Write access to FDA app's bundle or plugin dir Direct DB modification Edit TCC.db to grant consent SIP disabled or FDA Inherited permissions Child process inherits parent's TCC grants Code execution in context of FDA-granted app Automation abuse Apple Events / osascript to control TCC-granted app Automation permission (lower bar than direct TCC) Mounting tricks Mount a crafted disk imag …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills yaklang/macos-security-bypass