Abusing the Admin Framework for fun and profit

In 2023, I stumbled into OffSec’s EXP-312 “macOS Control Bypasses.” As a blue-teamer mostly working in Windows environments, macOS felt foreign, which made it enticing. Before long, it was eating my free time. Since then, I've met a small but passionate community of researchers and even picked up a few CVEs through Apple’s Security Bounty program. I’m still new to the macOS security scene, and my…