EXP-312 · OSMR · For individual practitioners
EXP-312: what the course covers - and what we add.
EXP-312 (OSMR) covers macOS security from the attacker's side: system architecture, entitlements, TCC, sandbox escapes, kernel and driver surfaces.
Who it is for
Testers with macOS fleets in scope, and reverse engineers.
Course content (official scope)
- →macOS system architecture
- →Entitlements and TCC
- →Sandbox escapes
- →Kernel and driver surfaces
Course content, labs and the OSMR exam are provided by OffSec. The official course description always takes precedence. This page reviewed: 2026-08-07.
What Exploit Labs adds
- +An assessment of your macOS fleet hardening following the training
For security teams
Multiple people, role paths, reporting and procurement run through OffSec Learn Enterprise.
See Learn EnterpriseFor individual practitioners
Individual licence, access duration, exam attempts and preparation - start here.
See individual licences