His first attempt died in the sandbox. He tried dlopen() from a remote process, but macOS had no direct CreateRemoteThread equivalent. He discovered mach_inject , a legendary framework from the early 2000s. It used Mach IPC (Inter-Process Communication) and thread_create to force the target process to load a bundle. He cloned the old code, fought with 32-bit relics, and watched it crash against SIP.
“DLL injector for Mac,” he muttered, typing the phrase into a search bar for the twentieth time. The results were a graveyard. Stack Overflow posts from 2011, abandoned GitHub repos, forum threads ending with “just use Windows lol.” dll injector for mac
But Leo wasn’t looking for a pre-made tool. He was writing a story—his own injector, from scratch. His first attempt died in the sandbox
“Okay,” he whispered. Disable SIP? No. That was cheating. Real injectors don’t break the system—they dance around it. The results were a graveyard
But that wasn’t an injector. That was pre-loading. A real injector attaches to a running process.