Pegasus and Nation-State Level Attacks

More documents

Recommendations

Info

What just happened?
What just happened? “Lawful Intercept”
Page 1 and 2: Max Bazaliy Seth Hardy Andrew Blaic
Page 3: Video
Page 7 and 8: Collaboration
Page 9 and 10: Citizen Lab: Actor Attribution ●
Page 11 and 12: What is Pegasus? ● Pegasus is esp
Page 13 and 14: Exploit Chain - Trident ● CVE-201
Page 15 and 16: Technical Analysis
Page 17 and 18: Stage 1
Page 19 and 20: Vulnerability: CVE-2016-4657 ● Vi
Page 21 and 22: defineProperties internals (continu
Page 23 and 24: void MarkedArgumentBuffer::slowAppe
Page 25 and 26: Any reference to a heap property (a
Page 29 and 30: Vulnerability: CVE-2016-4655 ● An
Page 31 and 32: OSNumber::withNumber constructor OS
Page 33 and 34: kern_return_t is_io_registry_entry_
Page 35 and 36: Pegasus exploitation of infoleak io
Page 37 and 38: Old friend OSUnserializeBinary OSOb
Page 39 and 40: setAtIndex problem #define setAtInd
Page 41 and 42: Pegasus exploitation of UAF encodin
Page 45 and 46: com.apple.itunesstored.2.csstore
Page 47 and 48: setDelegate internals ALWAYS_INLINE
Page 49 and 50: Bad cast problem detailed int64 fun
Page 51 and 52: Exploitation - bad cast - exec prim
Page 53 and 54: Espionage Techniques
Page 55 and 56:
Techniques to stay undetectable ●
Page 57 and 58:
Application Hooking ● iOS sandbox
Page 59 and 60:
Targeted apps
Page 61 and 62:
Historical analysis ● Non-public
Page 63 and 64:
Special thanks ● Citizen Lab: Bil
Page 65:
Thank You
show all

Pegasus and Nation-State Level Attacks

Create successful ePaper yourself

Delete template?

Save as template?