Down the Rabbit Hole - Reverse Engineering Mac OS X

More documents

Recommendations

Info

Function OverridingIdeally, overriding a system function would be simple:Discover the function’s entry in a universal table.Save off a pointer to the original code.Replace it with a pointer to your overriding code.Alas, Mach’s linking model lacks any sort of centralizedbottleneck. This stands in contrast to CFM.Monday, February 9, 2009
Page 1 and 2: Dynamically Overriding Mac OS XDown
Page 3: What Happened toHow to Hack Mac OS
Page 8 and 9: CFM’s ModelExporter-Owned Vector
Page 10 and 11: Function OverridingYou may think th
Page 12 and 13: Single-Instruction OverwritingBenef
Page 14 and 15: Single-Instruction Overwritingbl an
Page 16 and 17: Branch IslandsEscape branch island
Page 20 and 21: Lame Override Animation! Escape Isl
Page 22 and 23: Lame Override Animation! Escape Isl
Page 24 and 25: Function Overriding DetailsBuild th
Page 26 and 27: Code Injection OverviewMach supplie
Page 28 and 29: Code Injection LeakageWhile the inj
Page 30: Conclusion“Whoa.”—NeoMonday,

Down the Rabbit Hole - Reverse Engineering Mac OS X

Create successful ePaper yourself

Delete template?

Save as template?