HACKING AT MACH SPEED! - Reverse Engineering Mac OS X

More documents

Recommendations

Info

VULNERABILITY TERMINOLOGYBUFFER OVERFLOWWHAT ABOUT OUT-OF-BOUNDS ARRAY INDEXES?ARBITRARY CODE EXECUTIONWHAT ABOUT SOLARIS TELNETD BUG => AUTH BYPASSMEMORY CORRUPTIONWHAT ABOUT USE-AFTER-FREE?WHAT ABOUT MEMORY DISCLOSURE VULNERABILITIES?
TYPE SAFETYALL OF THESE VULNERABILITIES ARE FAILURES OF TYPESAFETYC/C++ ARE NOT MEMORY-SAFE OR TYPE-SAFETYPE-SAFE LANGUAGES ONLY HAVE THESE PROBLEMS WHENTHEIR IMPLEMENTATIONS, WRITTEN IN UNSAFE LANGUAGES,HAVE THESE VULNERABILITIESOR PROGRAMS USE “UNSAFE” EXTENSIONSWHAT SHOULD WE CALL THESE ISSUES?
Page 1 and 2: HACKING AT MACH SPEED!HOW I FOUND A
Page 3 and 4: THIS STORY STARTS WITH TWO GUYS NAM
Page 5 and 6: CMU GRAD STUDENTS WROTE A MICROKERN
Page 7 and 8: AND NEXTSTEP EVENTUALLY BECAME MAC
Page 9 and 10: WHAT IS LOVE MACH?
Page 11 and 12: TASKSRESOURCE CONTAINERS THAT HOLD:
Page 13 and 14: PORTSQUEUE OF STRUCTURED MESSAGESVE
Page 15 and 16: MACH RPCMACH RPC IS BUILT USING MES
Page 17 and 18: THE KERNEL IS JUST A TASKMOST LOW-L
Page 19 and 20: BOOTSTRAP SERVERHOW CLIENTS FIND SE
Page 21 and 22: UPDATE_SHARING.DEFSprajna% ls /Syst
Page 23 and 24: LET’S GO A BUG-HUNTING
Page 25 and 26: PWN2OWN PRIZES FOR 2012OR, REPORT Y
Page 27 and 28: ARE WE CHASING OUR TAIL?IS THE VULN
Page 29 and 30: EXPLOITS MATTEROSVDB QUERY FOR REMO
Page 31 and 32: $75K IS A LOT OF FOOD$75K = ~ $512K
Page 33 and 34: ONE 0DAY RUINS YOUR DAYONE 0DAY BRO
Page 36 and 37: IS THIS THE ADVANCED PERSISTENT THR
Page 38 and 39: 0DAY ATTACKS != H1N1STOP TREATING 0
Page 40 and 41: PREVENTION IS HARDBECAUSE THE SECUR
Page 42 and 43: EAT THE RICH AV VENDORSOVERHEARD OU
Page 46 and 47: “MEMORY TRESPASS”“MEMORY TRES
Page 48 and 49: BUT, BUT, ASLR, DEP!ASLR AND DEP DO
Page 50 and 51: TACTICS VS. STRATEGYMALICIOUS INJEC
Page 52: QUESTIONS?@DINODAIZOVI / DDZ@THETA4

HACKING AT MACH SPEED! - Reverse Engineering Mac OS X

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?