DE MYSTERIIS DOM JOBSIVS Mac EFI Rootkits - Reverse ...

More documents

Recommendations

Info

REFERENCES‣ UEFI Spec‣ http://www.uefi.org/specs/‣ EFI Development Kit II source & documentation‣ http://sourceforge.net/apps/mediawiki/tianocore/index.php?title=EDK2‣ Mac OS X Kernel Programming Guide‣ http://developer.apple.com/library/mac/#documentation/Darwin/Conceptual/KernelProgramming/‣ Mac OS X Internals - Amit Singh‣ http://osxbook.com/‣ Mac OS X Wars: A XNU Hope - nemo‣ http://www.phrack.com/issues.html?issue=64&id=11#article‣ Runtime Kernel kmem Patching - Silvio Cesare‣ http://biblio.l0t3k.net/kernel/en/runtime-kernel-kmem-patching.txt‣ Designing BSD Rootkits - Joseph Kong‣ http://nostarch.com/rootkits.htm‣ Reverse Engineering Mac OS X - fG‣ http://reverse.put.as/‣ Hacking The Extensible Firmware Interface - John Heasman‣ https://www.blackhat.com/presentations/bh-usa-07/Heasman/Presentation/bh-usa-07-heasman.pdf‣ Attacking Intel BIOS - Invisible Things Lab‣ http://invisiblethingslab.com/resources/bh09usa/Attacking%20Intel%20BIOS.pdfDe Mysteriis Dom Jobsivs - Black Hat USA2012
KTHXBAI \m/twitter: @snareblog: http://ho.axPlease complete the speaker feedback surveysgreetz:y011, wily, fG! & #osxre, metlstorm, sharrow, nemospecial thanks to:the black hat crew for a great con/partyjesse for the test machine that I bricked (and resurrected)baker & glenno for the brutal arthttp://www.assurance.com.au
Page 1 and 2:
DE MYSTERIIS DOM JOBSIVS:MAC EFI RO
Page 3 and 4:
AGENDA‣ Things I will talk aboutI
Page 5 and 6:
INTRODUCTIONI WANT A COOL BOOT SCRE
Page 8 and 9:
II. EFI FUNDAMENTALSDe Mysteriis Do
Page 10 and 11:
EFI ARCHITECTUREPUTTING THE “SUCK
Page 12 and 13:
EFI ARCHITECTURE‣ Tables - pointe
Page 14 and 15:
EFI ARCHITECTURE‣ Some telling ex
Page 16 and 17: III. DOING BAD THINGS WITHEFIDe Mys
Page 18 and 19: DOING BAD THINGS WITH EFIATTACKING
Page 24 and 25: ATTACKING THE KERNEL‣ Patch the k
Page 26 and 27: ATTACKING THE KERNELStart of kernel
Page 28 and 29: ATTACKING THE KERNELPATCHING THE KE
Page 31 and 32: ATTACKING THE KERNEL‣ What’s ou
Page 33 and 34: ATTACKING THE KERNEL‣ Preparing o
Page 35 and 36: ATTACKING THE KERNELOTHER HALF-ASSE
Page 37 and 38: ‣ In ascending order of awesome
Page 39 and 40: PERSISTENCEEFI SYSTEM PARTITION‣
Page 41 and 42: PERSISTENCEPCI DEVICE EXPANSION ROM
Page 43 and 44: PERSISTENCEFIRMWARE FLASH‣ Apple
Page 46 and 47: PERSISTENCEFIRMWARE FLASH‣ Manipu
Page 48 and 49: V. EVIL MAID ATTACKSDe Mysteriis Do
Page 50 and 51: EVIL MAID ATTACKSWHAT CAN WE DO WIT
Page 52 and 53: EVIL MAID ATTACKSIT’S MY JOB TO K
Page 54 and 55: EVIL MAID ATTACKSTHUNDERBOLT TO GIG
Page 56 and 57: DEMO‣ Evil maid using USB‣ Boot
Page 58 and 59: DEMODe Mysteriis Dom Jobsivs - Blac
Page 60 and 61: IN CASE MY DEMO BROKEHERE’S SOME
Page 62 and 63: DEFENCEEFI FIRMWARE PASSWORD?‣ Ha
Page 64 and 65: DEFENCEUEFI SECURE BOOT‣ Issues
show all

DE MYSTERIIS DOM JOBSIVS Mac EFI Rootkits - Reverse ...

Create successful ePaper yourself

Delete template?

Save as template?