https://github.com/gdbinit/rootfool
通过内核模块动态起停 SIP 功能,基于对 csrctl 的逆向。
相关实现细节在 < target="_blank" rel="nofollow" href="https://reverse.put.as/2015/10/12/rootfool-a-small-tool-to-dynamically-disable-and-enable-sip-in-el-capitan/#more-2469">https://reverse.put.as/2015/10/12/rootfool-a-small-tool-to-dynamically-disable-and-enable-sip-in-el-capitan/#more-2469