iPhone Rootkit? There's an App for that! - Reverse Engineering Mac ...
iPhone Rootkit? There's an App for that! - Reverse Engineering Mac ...
iPhone Rootkit? There's an App for that! - Reverse Engineering Mac ...
- No tags were found...
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Reversing StepsAnalyzed the PDF• Barebones PDF. Viewer shows one “empty” page• Compared PDFs between iOS device/version− A single zlib deflated font section is the only difference• Deflate this section - strings indicate a whole MACH-O dylib in theresomeplace• Wrote a quick file splitter “extract_payload”• Found 3 parts− CFF Font egg− <strong>Mac</strong>ho_1− <strong>Mac</strong>ho_2Copyright Trustwave 2010