ARM-ed and Dangerous: Dylib Injection on macOS

Technical research detailing an ARM64 Dylib injection technique for Apple Silicon macOS that bypasses direct task_for_pid restrictions by enumerating Mach processor sets to obtain task ports, then allocates memory, patches ARM64 shellcode at runtime, and spawns a remote thread to load a Dylib via dlopen. The post includes full shellcode, C implementation, build steps, and a working demo against a benign target process, and notes that SIP/Hardened Runtime limit injection into hardened apps. It concludes with brief defender guidance emphasizing code-signing enforcement and disk-based Dylib detection opportunities.