Shellcode for macOS on M1 chips - Part 2: Writing a bind shell

This series shows how to write shellcode in ARM64 assembly for macOS on M1 chips.

In the second part of the series, we learn how to write a bind shell.

Further reading
M.K. McKusick, K. Bostic, M.J. Karels, J.S. Quarterman, The Design and Implementation of the 4.4 BSD Operating System (Addison-Wesley 1996)

Presentation made using LaTeX Beamer, Slide Pilot, OmniGraffle and QuickTime.

Sections
00:00:00 Greetings
00:01:02 How a bind shell works
00:07:46 macOS bind shell summary
00:15:23 socket call
00:21:07 bind call and sockaddr_in structure
00:35:31 listen call
00:38:19 accept call
00:41:16 dup2 call
00:45:55 execve call
00:47:51 Setting up execve arguments
00:59:54 Testing the bind shell
01:02:22 Removing Null bytes
01:13:19 Testing the bind shell without Null bytes

[thomasseidler]

Very valuable, thank you very much. Great voice, it makes listening really fun!