Down the Rabbit Hole - Reverse Engineering Mac OS X

More documents

Recommendations

Info

Branch IslandsEscape branch island (required):Used to jump from the original function to theoverriding function.Allocated at the end of the address space.What our generated ba instruction points at.Reentry branch island:Optional, only generated if you wish to reenter theoriginal function.Houses the original function’s first instruction.Monday, February 9, 2009
Inside the Branch IslandC definition:long kIslandTemplate[] = {0x9001FFFC,0x3C00DEAD,0x6000BEEF,0x7C0903A6,0x8001FFFC,0x60000000,0x4E800420};What, you guys don’t read machine language?!?Monday, February 9, 2009
Page 1 and 2: Dynamically Overriding Mac OS XDown
Page 3: What Happened toHow to Hack Mac OS
Page 7 and 8: Function OverridingIdeally, overrid
Page 9 and 10: CFM vs MachExporter-Owned Vector Ta
Page 11 and 12: Function OverridingWhat will work:
Page 13 and 14: Single-Instruction OverwritingRepla
Page 15: The Branch IslandWe can allocate a
Page 21 and 22: Lame Override Animation! Reentry Is
Page 23 and 24: Function Overriding DetailsDiscover
Page 25 and 26: Code Injection OverviewFunction ove
Page 27 and 28: Code Injection DetailsAllocate a re
Page 29 and 30: Code & Doc AvailabilityTwo packages

Down the Rabbit Hole - Reverse Engineering Mac OS X

Create successful ePaper yourself

Delete template?

Save as template?