{
  "added_at": "2026-11-02",
  "additional_evidence_urls": [
    "https://github.com/michalmalik/osx-re-101/tree/486f33adf35848735327d9a83a05f9abd0f18af7",
    "https://github.com/michalmalik/osx-re-101/commits/486f33adf35848735327d9a83a05f9abd0f18af7"
  ],
  "category": "learning",
  "description_en": "A single-README reading list for macOS (OS X) and iOS reverse engineering, kept by Michal Malik from 2015 to 2019 and labelled a work in progress. Its 98 entries in nine sections run from must-read blogs and Mach-O, ABI and system-call references through Mach-O basics, malware, anti-debugging and obfuscation write-ups, kernel, sandbox and jailbreak research, kernel-extension development and kernel debugging, and forensics and monitoring material, to crackmes and six books. Entries are bare links or titles, mostly with no annotation.",
  "description_zh": "以单个 README 维护的 macOS（OS X）与 iOS 逆向工程阅读清单，由 Michal Malik 于 2015 至 2019 年间整理，并标注为仍在进行中。九个部分共 98 个条目，依次涵盖必读博客与 Mach-O、ABI 和系统调用参考资料，Mach-O 基础知识，恶意软件、反调试和混淆相关文章，内核、沙箱与越狱研究，内核扩展开发与内核调试，取证与监控资料，以及 crackme 练习和六本书。条目只有链接或标题，大多没有说明。",
  "entry_url": "https://awesomerea.org/resources/osx-re-101/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/osx-re-101/",
  "evidence_url": "https://github.com/michalmalik/osx-re-101/blob/486f33adf35848735327d9a83a05f9abd0f18af7/README.md",
  "group": "learn",
  "id": "osx-re-101",
  "json_url": "https://awesomerea.org/resources/osx-re-101/record.json",
  "kind": "learning-resource",
  "markdown_url": "https://awesomerea.org/resources/osx-re-101/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/osx-re-101/index.md",
  "name": "osx & ios re 101",
  "name_zh": "osx & ios re 101 macOS 与 iOS 逆向阅读清单",
  "record_type": "resource",
  "relationship": "learning",
  "requirements": [
    "The reviewed commit, from 2019-12-19 and the latest, closes a history of 69 commits that began on 2015-07-13. Most linked material targets OS X 10.x and iOS 8–10 era internals, such as El Capitan kernels and iOS 9 and 10 jailbreak analyses, and the list predates current macOS and iOS releases and Apple silicon Macs. A December 2019 commit replaced some broken and outdated links.",
    "No target files are supplied or needed by the list itself; the linked tutorials and crackmes bring their own samples, and the books are listed by title only. Following the material assumes a Mac or iOS device and the tools each article uses, such as LLDB, Hopper, and VMware Fusion or VirtualBox for kernel debugging.",
    "The list mixes analysis tutorials with malware infection, rootkit, privilege-escalation and jailbreak write-ups. The repository contains only README.md and no license file, so the list states no reuse terms, and linked works keep their own rights."
  ],
  "requirements_zh": [
    "所审阅的提交日期为 2019-12-19，也是最新提交，此前的提交历史共 69 个提交，始于 2015-07-13。所链接的资料大多针对 OS X 10.x 和 iOS 8–10 时期的系统内部机制，例如 El Capitan 内核以及 iOS 9 和 10 的越狱分析；清单的更新早于当前的 macOS 和 iOS 版本以及搭载 Apple 芯片的 Mac。2019 年 12 月的一次提交更换了部分失效和过时的链接。",
    "清单本身不提供也不需要任何目标文件；所链接的教程和 crackme 自带样本，书籍只列出书名。学习这些资料需要一台 Mac 或 iOS 设备，以及各篇文章所用的工具，例如 LLDB、Hopper，以及用于内核调试的 VMware Fusion 或 VirtualBox。",
    "清单既收录分析教程，也收录恶意软件感染、rootkit、提权和越狱相关文章。仓库只有 README.md，没有许可证文件，因此清单本身未声明复用条款，所链接作品各自保留权利。"
  ],
  "targets": [
    "app",
    "binary"
  ],
  "url": "https://github.com/michalmalik/osx-re-101",
  "verification": "source-reviewed",
  "verified_at": "2026-10-20"
}