opainject_macos

Dynamic library injection tool for macOS using Return-Oriented Programming (ROP) techniques.

---

Download

Latest Release · Source Code

---

Usage

sudo ./opainject <pid> /path/to/dylib

Injects a dynamic library into a running process by process ID.

---

Features

• ROP-based injection - No executable memory allocation required
• ARM64/ARM64e support - Universal binary with Pointer Authentication Code handling
• Automatic architecture matching - Detects and adapts to target process architecture
• Sandbox bypass - Handles sandbox restrictions automatically

---

Requirements

• macOS 11.0 or later
• ARM64/ARM64e processor
• Root privileges (sudo)
• SIP may need to be disabled for hardened runtime targets

Note: Target executable architecture must match dylib architecture.

---

Documentation

Complete documentation, build instructions, and technical details available in the GitHub repository.

---

Attribution

macOS port by: @nkhmelni

Based on: opainject by Lars Fröder (opa334)

Task port acquisition technique: Jonathan Levin’s PST2: Doing It Again

---

License

MIT License

Copyright (c) 2022 Lars Fröder · Copyright (c) 2025 Nikita Hmelnitkii

This site is open source. Improve this page.