OPTIMIZED FUZZING IOKIT IN IOS

Recommendations

Info

Introduction(I) Previous Research • Focused on IOExternalMethodDispatch • Base on IDA static analysis • Disadvantages • sMethod symbols required • Decrypted kernelcache required • Unresolved instructions of some KEXTs • Insufficient information
Introduction(I) Our Work • Not only IOExternalMethodDispatch • Base on dynamically kernel read/write • Advantages • Independent of sMethod symbols • A decrypted kernelcache not required • More sufficient information
Page 1 and 2: OPTIMIZED FUZZING IOKIT IN IOS LEI
Page 3 and 4: Outlines • Introduction • Infor
Page 5: Introduction(I) IOKit App-0 App-1
Page 9 and 10: Part II Information Extraction
Page 11 and 12: Information Extraction(II) Basic In
Page 13 and 14: Information Extraction(II): Basic I
Page 25 and 26: Information Extraction(II): IOUserC
Page 33 and 34: Information Extraction(II): IOExter
Page 43 and 44: Part III Fuzzing
Page 45 and 46: Fuzzing(III):Fuzzing Preparation Fu
Page 47 and 48: Fuzzing(III):Fuzzing Preparation Un
Page 49 and 50: Fuzzing(III): Fuzz Thread Client-0
Page 51 and 52: Part IV Experimental Results
Page 53 and 54: Experimental Results(IV) Vulnerabil
Page 55 and 56: Experimental Results(IV) Vulnerabil
Page 57 and 58:
Experimental Results(IV): Vulnerabi
Page 59 and 60:
Last Black Hat Sound Bytes
show all

OPTIMIZED FUZZING IOKIT IN IOS

Create successful ePaper yourself

Delete template?

Save as template?