Phrack Issue 64
In the latest issue of Phrack, you can find, among others, a very interesting ‘paper’ on shellcode and rootkit authoring for Mac OS X. While some of the techniques presented are not new, there are few — if any — publicly available texts that present them in such a concise manner. The paper focuses mostly on the Intel platform although there are descriptions and some code for PowerPC too. Worth a read.
Local root exploits for MacOSX are on the way? Probably! However, since I don’t know of many MacOSX Servers the problem will never be comparable to windows (RPC worms, viruses, etc.).