HACKING AT MACH SPEED! - Reverse Engineering Mac OS X

More documents

Recommendations

Info

TACTICS VS. STRATEGYMALICIOUS INJECTED CODE IS NOT THE TRUE PROBLEMIT IS ONLY THE MOST COMMON EXPLOITATION TACTICCODE-REUSE EXPLOITATION TECHNIQUES DON’T NEED TOINJECT ANY CODE, WILL REUSE WHAT IS THERETHE STRATEGY IS TO MAKE THE TARGET APPLICATION DOUNEXPECTED THINGS IN A WAY USEFUL TO THE ATTACKERUNEXPECTED/UNDESIRABLE BEHAVIOR IS PROBLEM
MY SANDBOX SOAPBOXWHY DOES MY BROWSER NEED TO BE ABLE TO WRITE TOANYWHERE EXCEPT FOR ~/DOWNLOADS?WHY DO DOC READERS, IM CLIENTS, NEED TO WRITE FILES AT ALL?MULTI-USER DAC SECURITY MODEL IS ILL-SUITED TO THEDESKTOPWE NEED A NEW MULTI-APPLICATION DESKTOP SECURITY MODELPHONES (IPHONE AND ANDROID) ALREADY HAVE THISIPHONE PREVENTS INJECTED CODE AND APP MISBEHAVIOR
Page 1 and 2: HACKING AT MACH SPEED!HOW I FOUND A
Page 3 and 4: THIS STORY STARTS WITH TWO GUYS NAM
Page 5 and 6: CMU GRAD STUDENTS WROTE A MICROKERN
Page 7 and 8: AND NEXTSTEP EVENTUALLY BECAME MAC
Page 9 and 10: WHAT IS LOVE MACH?
Page 11 and 12: TASKSRESOURCE CONTAINERS THAT HOLD:
Page 13 and 14: PORTSQUEUE OF STRUCTURED MESSAGESVE
Page 15 and 16: MACH RPCMACH RPC IS BUILT USING MES
Page 17 and 18: THE KERNEL IS JUST A TASKMOST LOW-L
Page 19 and 20: BOOTSTRAP SERVERHOW CLIENTS FIND SE
Page 21 and 22: UPDATE_SHARING.DEFSprajna% ls /Syst
Page 23 and 24: LET’S GO A BUG-HUNTING
Page 25 and 26: PWN2OWN PRIZES FOR 2012OR, REPORT Y
Page 27 and 28: ARE WE CHASING OUR TAIL?IS THE VULN
Page 29 and 30: EXPLOITS MATTEROSVDB QUERY FOR REMO
Page 31 and 32: $75K IS A LOT OF FOOD$75K = ~ $512K
Page 33 and 34: ONE 0DAY RUINS YOUR DAYONE 0DAY BRO
Page 36 and 37: IS THIS THE ADVANCED PERSISTENT THR
Page 38 and 39: 0DAY ATTACKS != H1N1STOP TREATING 0
Page 40 and 41: PREVENTION IS HARDBECAUSE THE SECUR
Page 42 and 43: EAT THE RICH AV VENDORSOVERHEARD OU
Page 44 and 45: VULNERABILITY TERMINOLOGYBUFFER OVE
Page 46 and 47: “MEMORY TRESPASS”“MEMORY TRES
Page 48 and 49: BUT, BUT, ASLR, DEP!ASLR AND DEP DO
Page 52: QUESTIONS?@DINODAIZOVI / DDZ@THETA4

HACKING AT MACH SPEED! - Reverse Engineering Mac OS X

Create successful ePaper yourself

Delete template?

Save as template?