iPhone Rootkit? There's an App for that! - Reverse Engineering Mac ...

More documents

Recommendations

Info

Oh !@#$. My Cached Corp. OWA Login... continued(gdb) dump memory dump_100000.bin 0x100000 0x400000...$ strings dump_100000.bin |grep -B6 -A2 'Authorization: Basic'POST /Microsoft-Server-ActiveSync?User=emonti&DeviceId=ApplnnnnNP&DeviceType=iPhone&Cmd=Ping HTTP/1.1Host: owa.mycompany.comContent-Length: 0Ms-Asprotocolversion: 12.1User-Agent: Apple-iPhone2C1/801.306X-Ms-Policykey: 550504473Authorization: Basic bXljb21wYW55LmNvbVxlbW9udGk6bm90ZnVja2luZ2xpa2VseSE=Accept: */*Accept-Language: en-us* Alternately See: h
Targeting iOS ApplicationsiOS isn’t just for fart apps anymore…Copyright Trustwave 2010
Page 5 and 6: iPhone/iOS Security Overview
Page 7 and 8: Architecture OverviewApplications P
Page 9 and 10: Application SecurityCode signing•
Page 11 and 12: Jailbreaking Overview
Page 13 and 14: Jailbreakme.com A Thing to Behold
Page 15 and 16: What it looks likeVisit h'p://jailb
Page 17 and 18: Weaponizing
Page 19 and 20: Patch PlanReversing the installui.d
Page 21 and 22: My “Big Fat Rootkit”… so farC
Page 23 and 24: Set-upA vanilla un-jailbroken iPhon
Page 25 and 26: Hardware: Mic and AudioAudio record
Page 27: Dumping Process DataSeveral interes
Page 31 and 32: Demo App Backdoor
Page 33 and 34: Binary Reversing Prep (continued…
Page 35 and 36: No More SecretsHint: find the LC
Page 37 and 38: Mach Binary Encryption (continued
Page 39 and 40: What’s your point?For starters…
Page 41 and 42: Objective-C Method HookingIt’s ca
Page 43 and 44: Objective-C Method Hook ExampleLets
Page 45 and 46: Injecting Our LibraryConventionally
Page 47 and 48: ConclusionsLots of security researc
Page 49 and 50: Reversing Redux: The Binary “star
Page 51 and 52: … continued: eggMalformed Times-
Page 53 and 54: class-dump on installui.dylib (aka

iPhone Rootkit? There's an App for that! - Reverse Engineering Mac ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?