This 3-day training focuses on macOS Vulnerability Research (VR) for beginner to intermediate students. While intermediate topics will be discussed, the course focuses on bringing security researchers up to speed with macOS’s unique protections and vulnerabilities.
This training focuses mostly on logic vulnerabilities as these are hard to systemically mitigate, unlike memory corruptions. With the recent trend of Apple’s move towards shipping increasingly robust user and kernelspace memory-protection mitigations it is our belief that logic vulnerabilities are the future of VR on macOS.
Check out the full CFP here: full curriculum
Objective by the Sea v9 / OBTS v9 (Hawaii, USA): 2026-11-15 - 2026-11-17 - register here - price: $3000 + VAT
You can cancel your booking up to 1 month before the start of the training to get a full refund minus transaction and processing fees
Later cancellations can not refunded, however we might be able to make an exception in extraordinary cases. Please reach out to us using the contact details on this page.
Please note that we reserve the right to cancel any booking, in which case you are entitled to a full refund.
Our main contact email for the training is:
contact at macosvuln dot training
You may also reach each of us directly by using:
csaba at macosvuln dot training or
gergely at macosvuln dot training
Other than that, feel free to reach out to us over social media or any other way you see fit. We’ll try our best to respond in a timely manner.
Students should have the following skills in order to successfully participate in the class:
Csaba is a Principal macOS Security Researcher working at Kandji, focusing on vulnerability research and EDR detection development. He currently has over 100 CVEs issued by Apple for vulnerabilities ranging from simple info leaks to full macOS exploit chains bypassing all security controls. He frequently presents his findings on conferences, like BlackHat, Objective By The Sea, POC, and many others. Prior Kandji Csaba worked for OffSec developing the EXP-312 training about macOS exploitation.
Gergely is a independent security researcher working mainly on the Apple Security Bounty program, with a research focus on logic vulnerabilities. He has presented his findings at OBTSv6, and blogs at https://gergelykalman.com So far he has found multiple user to root LPEs, multiple TCC bypasses, an app sandbox escape, along with other bugs. He enjoys trying to exploit the unexploitable, as evidenced by multiple bugs of his that were hiding in plain sight for years or in one case, for decades.