Researching New Attack Interfaces on iOS and OSX

Researching New Attack Interfaces on iOS and OSX

Hack In The Box Security Conference via YouTube Direct link

Kernel Diff Methodology

21 of 43

21 of 43

Kernel Diff Methodology

Class Central Classrooms beta

YouTube playlists curated by Class Central.

Classroom Contents

Researching New Attack Interfaces on iOS and OSX

Automatically move to the next video in the Classroom when playback concludes

  1. 1 Intro
  2. 2 Solution Overview
  3. 3 Attack Surfaces
  4. 4 Think about Apple System
  5. 5 New Attack Interfaces Generator
  6. 6 KEXTs Interfaces Analysis Flow
  7. 7 Classes inheritance relationship
  8. 8 Class/Method names re-fine
  9. 9 Connection Type - User Clients
  10. 10 User Client External Methods - Graceful
  11. 11 User Client External Methods - Ugly
  12. 12 Parse the External Method Dispatch Array
  13. 13 Analyze the ASM Instructions
  14. 14 Custom KEXT Analysis Engine
  15. 15 Generate CFG local information
  16. 16 Analyze key paths based on CFG
  17. 17 Emulate key instructions operation
  18. 18 Emulate register operation
  19. 19 Output User Client or external method information
  20. 20 Kernel Interfaces
  21. 21 Kernel Diff Methodology
  22. 22 Kernel Diff Analysis Practice (1/2)
  23. 23 KEXTs Diff Analysis
  24. 24 Disadvantages about KEXTs static analysis
  25. 25 Comparison of dynamic trace
  26. 26 Frida Hook in User Mode
  27. 27 xpe_connection_send_message API context
  28. 28 xpe_connection send message API context
  29. 29 Hunt more dynamic relation if you like
  30. 30 Dtrace introduction
  31. 31 Dtrace providers list
  32. 32 Dtrace seript (e.g. file probe)
  33. 33 Enhanced kernel fuzz
  34. 34 KASAN in iOS/OSX Kernel
  35. 35 Future plan
  36. 36 CVE-2018-4462 - Root Cause
  37. 37 OOB read in AMD Radeon X4000 Extension
  38. 38 OOB read-Root Cause
  39. 39 Over Flow-Root Cause
  40. 40 NULL PAGE Reference in Intel Accelerator
  41. 41 NULL PAGE Reference - Root Cause
  42. 42 Divide Zero in AMD Radeon X4000 Extension
  43. 43 Divide Zero - Root Cause

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.