jiska
jiska
  • Видео 37
  • Просмотров 77 679
BlackHat Europe 2024 Training [Advertisement]
This training provides you with a comprehensive toolkit for analyzing apps, system daemons, the XNU kernel, firmware, and system logs on Apple's mobile devices. It caters to beginner, intermediate, and advanced reverse engineers.
More details on reversing.training!
Book via www.blackhat.com/eu-24/training/schedule/index.html#practical-ios-app-user--kernel-space-and-firmware-reverse-engineering--39919
Просмотров: 219

Видео

[0x0e] Reversing Shorts :: Decoding Apple's OSLog
Просмотров 7324 месяца назад
In this video, we take a look into how Apple's clang compiler handles os_log internally. While the source code looks very readable, some compiler builtins ruin our day! Let's take a look into how to recover this mess. Full playlist of reversing shorts: ruclips.net/p/PLkOopkYm0fCV45i_n8z5LSUL3QBXNAP2G os_log.js: github.com/seemoo-lab/frida-scripts/blob/main/scripts/os_log.js Apple's clang source...
[0b00] Reversing 101 :: Hacking Closed-Source Firmware
Просмотров 4,9 тыс.Год назад
Useful tips on firmware reverse engineering I wish I had known earlier. Follow my journey of learning how to reverse engineer by staring on a Fitness tracker and Bluetooth chip firmware! Check out my channel for more reverse engineering videos: @jiskac CCC conference talk by Daniel and me on hacking Fitbit firmware: ruclips.net/video/ccbwtrrB4lk/видео.html REcon conference talk by Dennis and me...
[0x0d] Reversing Shorts :: Real-World Tutorials 🤓
Просмотров 1,8 тыс.Год назад
Want to learn reverse engineering, but there's way too many tutorials to pick a good one? I'll show you my top recommendations to get started with beginner and advanced reverse-engineering tutorials. Links to the tutorials in the description below! Full playlist of reversing shorts: ruclips.net/p/PLkOopkYm0fCV45i_n8z5LSUL3QBXNAP2G Hacking Windows Minesweeper: www.begin.re/ BlackHoodie: blackhoo...
[0x0c] Reversing Shorts :: 🩳🧵🪡
Просмотров 699Год назад
Reverse engineering short about how to reverse a shorts sewing pattern from ready-to-wear shorts. The one and only reversing shorts you all have been waiting for! Full playlist of reversing shorts: ruclips.net/p/PLkOopkYm0fCV45i_n8z5LSUL3QBXNAP2G Chapters: 00:00 - Introduction 00:15 - Plan: Create sewing instructions 00:54 - Create sewing pattern 03:04 - Cut pattern 03:25 - Sew inside 03:47 - B...
[0x0b] Reversing Shorts :: iOS & macOS Kernel Debug View
Просмотров 2 тыс.Год назад
See what's happening live inside the XNU kernel without any complicated debug and patching setup. Various places in the kernel have kernel_debug statements, which can be observed from user space with kdv (Kernel Debug View). Full playlist of reversing shorts: ruclips.net/p/PLkOopkYm0fCV45i_n8z5LSUL3QBXNAP2G kdv: newosxbook.com/tools/kdv.html Public trace codes in XNU source code: sourcegraph.co...
Wibbly Wobbly, Timey Wimey - What's Really Inside Apple's U1 Chip
Просмотров 428Год назад
Talk about Apple's ultra-wideband (UWB) chip and ecosystem. How is distance measured? How is it reported from the chip and then used within Apple's ecosystem? How does Bluetooth integration with BLE advertisements work? As presented on DEF CON 29, but with improved captions.
[0x0a] Reversing Shorts :: Apple's Cross-Process Communication (XPC)
Просмотров 2,2 тыс.Год назад
XPC is a mechanism on iOS and macOS that enables processes to exchange data. Especially on Apple-internal implementations, it's used excessively. Simple features are often split across daemons and apps, with components implemented separately. In this video, we'll follow XPC communication across daemons to see what happens when we play a sound on an AirTag. Full playlist of reversing shorts: ruc...
[0x09] Reversing Shorts :: iOS Bluetooth Debugging Driver Internals & Packet Logging
Просмотров 3,1 тыс.Год назад
Let's take a look into the iOS Bluetooth stack! Logging all packets with PacketLogger is easy, but how does it work internally? How do bluetoothd and the kernel interact with each other? Full playlist of reversing shorts: ruclips.net/p/PLkOopkYm0fCV45i_n8z5LSUL3QBXNAP2G Apple's Bluetooth developer tools and information: developer.apple.com/bluetooth libimobiledevice: github.com/libimobiledevice...
[0x08] Reversing Shorts :: Apple RTKit Firmware Analysis
Просмотров 4,5 тыс.Год назад
RTKitOS, also called RTKit, is Apple's most widespread operating system. Yet, nobody knows it. It runs on various Apple peripherals as well as the SoCs on the iPhone, Watch, and MacBook. Full playlist of reversing shorts: ruclips.net/p/PLkOopkYm0fCV45i_n8z5LSUL3QBXNAP2G *OS Internals books: newosxbook.com Project Zero blog post on RTKit reversing to analyse a DCP exploit: googleprojectzero.blog...
[0x07] Reversing Shorts :: iOS Device Supervision - Sniff Traffic & Defer Updates
Просмотров 6412 года назад
iOS device supervision is a useful feature for reverse engineering. In this video, you will see how it can be used to set up machine-in-the-middle sniffing with tools like Burp, and how to delay iOS updates by up to 90 days to help you jailbreaking. Full playlist of reversing shorts: ruclips.net/p/PLkOopkYm0fCV45i_n8z5LSUL3QBXNAP2G Explanation about deferring iOS OTA updates: gist.github.com/dh...
[0x06] Reversing Shorts :: Weather Manipulation
Просмотров 2 тыс.2 года назад
Bad weather forecast? Not a problem any more! Let's hook into the iOS Weather app. Not so easy due to all the CFDictionaries, but it works 😎
[0x05] Reversing Shorts :: iOS Kernel Demystified
Просмотров 5 тыс.2 года назад
The XNU kernel is essential to iOS and macOS security. In this video, we'll take a look into Apple's open-source releases as well as free tools to analyze closed-source extensions. Full playlist of reversing shorts: ruclips.net/p/PLkOopkYm0fCV45i_n8z5LSUL3QBXNAP2G XNU open source: github.com/apple-opensource/xnu IPSW downloads: ipsw.me/ img4tool: github.com/tihmstar/img4tool Ghidra kernelcache ...
[0x04] Reversing Shorts :: Finding and Backtracing Signal Messages on Android
Просмотров 1,2 тыс.2 года назад
[0x04] Reversing Shorts :: Finding and Backtracing Signal Messages on Android
[0x03] Reversing Shorts :: Out of Memory - Working around JetSam Memory Limits on iOS
Просмотров 1,1 тыс.2 года назад
[0x03] Reversing Shorts :: Out of Memory - Working around JetSam Memory Limits on iOS
[0x02] Reversing Shorts :: Backtracing Threads and Adding Symbols with Frida on iOS
Просмотров 1,6 тыс.2 года назад
[0x02] Reversing Shorts :: Backtracing Threads and Adding Symbols with Frida on iOS
[0x01] Reversing Shorts :: Finding the Signal Message Object with Frida on iOS
Просмотров 3,1 тыс.2 года назад
[0x01] Reversing Shorts :: Finding the Signal Message Object with Frida on iOS
[0x00] Reversing Shorts :: Introduction
Просмотров 2,1 тыс.2 года назад
[0x00] Reversing Shorts :: Introduction
Reverse Engineering Lab - Module 0x3
Просмотров 5772 года назад
Reverse Engineering Lab - Module 0x3
Reverse Engineering Lab - Module 0x2.1: Java Reversing and Android VM Setup
Просмотров 5552 года назад
Reverse Engineering Lab - Module 0x2.1: Java Reversing and Android VM Setup
Reverse Engineering Lab - Module 0x2: Ghidra & Frida
Просмотров 2,7 тыс.2 года назад
Reverse Engineering Lab - Module 0x2: Ghidra & Frida
Reverse Engineering Lab - Module 0x01: Selecting a Research Target
Просмотров 2,2 тыс.2 года назад
Reverse Engineering Lab - Module 0x01: Selecting a Research Target
iOS Reverse Engineering :: Part III :: Hooking into Objective-C
Просмотров 2,1 тыс.2 года назад
iOS Reverse Engineering :: Part III :: Hooking into Objective-C
iOS Reverse Engineering :: Part I :: Dynamic Reversing and iOS Basics
Просмотров 13 тыс.2 года назад
iOS Reverse Engineering :: Part I :: Dynamic Reversing and iOS Basics
iOS Reverse Engineering :: Part II :: System Processes and Hardware Interaction
Просмотров 2,6 тыс.2 года назад
iOS Reverse Engineering :: Part II :: System Processes and Hardware Interaction
Ghost Peak - UWB Distance Shortening Demo on Apple U1 Chip
Просмотров 8092 года назад
Ghost Peak - UWB Distance Shortening Demo on Apple U1 Chip
AirTag: AirTechno and Firmware Downgrade
Просмотров 1,1 тыс.2 года назад
AirTag: AirTechno and Firmware Downgrade
Very Pwnable Network: Cisco AnyConnect Security Analysis
Просмотров 3393 года назад
Very Pwnable Network: Cisco AnyConnect Security Analysis
Playing Custom Sounds on the AirTag
Просмотров 3,5 тыс.3 года назад
Playing Custom Sounds on the AirTag
Interacting with *OS Hardware from User Space
Просмотров 8833 года назад
Interacting with *OS Hardware from User Space

Комментарии

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Calouscardtywaretybruntyuntyhymertyfrunsityangertycunectyretiustyvacuitybrentysistertygretsyrapstyinsatertyvetyrutyvatchynevergety

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Frechklertyhastybuty

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Vertaslousytustyratsynthertygairustyretsyskythertycalistytendruntycelustyinty

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Whstyfrustcashervautyastyartydestyclearestycleanucthust

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Goldertyponkysupertypinktectysatertyhustertydatyfruenstydatyfrunstyhumpertyrubertyferusastertycarouselisutyrexpouty

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Andtheyaskquestyiknowanswertybutchangesmidmyrehastysaysayshuishuitalkertysertyburtyfruistyblertydryetycursetysaysayhurtyburtytouchrtynurckhtysayohthereismoretolifethanhannahshelfemptyornot

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Theheataghertystrapstablertytrentyairuesptylapertytustyburiesutygravertysautycubertusduscasthybchutyacustyreisucty

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Soididwhaticouldandobutheysayseeidohaveallineedorneedyourstoosowhyouwatchmeatyourfoodihavesoitismine

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Loltheymakemeguessinmysleepfrompastdeathsolikeieitherliveitbadnextdeathereagainorrrrrrrrrtheymertymuneirtysunertygidertylasoertyfrustyvutysalertyvetyacertylifertdetychuctyrastymastyveluvxty

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Carethenuncaretypayseecarefindvertyfruityhendsuichty

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Sotheywantwaterdiamundcrustbeltandcroygasjertyhusredtyjiustyfurhtybutertyfretymochtyrepityhuestyvedertyrapertybertyiustylivertyastyertyfruitydyertyromusty

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Wayertymerewtygravertysinguirty

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    ,

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Chandeliervampirediariesimmortalidolvampireservictyopertydedghuouakstyghuoilstertyfustyfutsuiy

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Gravertyfruistygavserustyvaaxtylightbulbyistyfruityastuidbutylamluseroutybrightybrukertyfurtyseftytheyfertyrusteftrbcuty

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Suiayeasyuesbahscsacashcfaaxasfacheipshavjekiwschustterbbaitnnsotyhastycousty

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Theyatemyquadswhichpartwhensaygravytertytendertyluiontyseraachastyrestypickluertustygresaxtydextertyfruitycalestertyfruitycucumbertylimesayfruitybaredty

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Loldontbreakthestepyousertysaysaytheybreakevenwatertyshowertysewertyblukertyrastyreustyaatcertempustyfruihsutyfexpirety

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Weusedtohavefuneveniftheytookthetortustyistytortyusterustcastydirectydetyswetyrestynutycaretusty

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Heysutywilowertysurtyfuberhuserty

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    TertyrudyaftertyrustyrewertyDUTCHASTY

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Prettystepcinderestyreistybeststepevertakenbutyothersutyhertycastlepuzzlertyadvertyuntymunertyloginplaydevucetytimunityhurty

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Ifiamkilledagaingivemesertyustyhastertycarestytertyberuitynutsyatertydeterty

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Dumpstertrudtysextypureshtyustybruisjetyreisuty

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    Myustymertyutyhertyustyamertyastertydiastyremunstyvietyrultywrytedastylevertyfrudtyesdertyfriuendseryy

  • @HannahOShea-fw8st
    @HannahOShea-fw8st Месяц назад

    DiD B̊iLLy JuNTy detyrestyfruityhedertyfruitycastyretuistyguidertywetertyhasersuiepoastyweathertycanertypepertyhipuostyastertyshudertyrufertygudtyustyfrusastybutusaxzuitydictysutyhersatygruistycartyestertyfruityseresplaityubicornwednesdattsutyruskiunstyitastyresty

  • @diegolanzani4766
    @diegolanzani4766 Месяц назад

    This is such a dream course for people in mobile security, great content and syllabus and instructors. There is not to much information con this so looks pretty amazing. It is unfortunately that is only in-person and not online or hybrid.

  • @RahulRP7777
    @RahulRP7777 Месяц назад

    I want to contact you for a bussiness inquiry Please share me your business email

  • @roz0n
    @roz0n 2 месяца назад

    Just discovered your videos. You are a blessing from god. Thank you for sharing all this!

  • @realkoryheard
    @realkoryheard 3 месяца назад

    How do you learn this? I’ve been reading *OS internals, Wardle’s art of Mac malware, etc and I have a iOS development background. Any recommendations for where I should start?

  • @learnwithdelwar
    @learnwithdelwar 4 месяца назад

    I really like the background lighting :)

  • @jeudesprits
    @jeudesprits 4 месяца назад

    Amazing!

  • @eduardschreder1623
    @eduardschreder1623 4 месяца назад

    finally another one! thanks!

  • @zedeleyici.1337
    @zedeleyici.1337 5 месяцев назад

    I respect you

  • @drygordspellweaver8761
    @drygordspellweaver8761 8 месяцев назад

    Great content, always helpful to see a tool in action.

  • @drygordspellweaver8761
    @drygordspellweaver8761 8 месяцев назад

    I'm loving the channel so far, thank you! Could you clarify more on this debugging combo method you talked about at the end? "ios Debugger combo: attach frida to inject fuzzing payload set breakpoint in target. Attach debug server Use IDA to decompile, press f5 and see your code, set breakpoint on something that looks like c code while still having advantage of being able to inject something with frida." So is this basically like a free workaround to have a dynamic way of interacting with IDA without paying for the pro/debugger setup? Would IDA free static analysis also be able to provide C-like code or is that only available with Pro version + IOkit?

    • @jiskac
      @jiskac 4 месяца назад

      Hey :) No, you still need the IDA Pro debugger! It just means that you can use both in parallel, like, attach with both Frida + IDA. But of course attaching with IDA only works if you have the pro version with a debugger.

    • @drygordspellweaver8761
      @drygordspellweaver8761 4 месяца назад

      @@jiskac Thanks for the clarification! I kinda encountered some bizarre "hidden bits" in my objective C reversing project that I couldn't decompile even with hopper/IDA. I then searched for some tool on github to do it but couldn't even build the project XD It seems like a very fascinating field but is so hard to come by many resources or training.

  • @kidabek
    @kidabek 8 месяцев назад

    I wonder if Apple has forgot to strip symbols from SEP OS in the past. Would be nice.

  • @josefmostafa5121
    @josefmostafa5121 10 месяцев назад

    Richtig Gut!

  • @MeowingCate
    @MeowingCate 10 месяцев назад

    Where can I buy that hoodie? I neeed that!!!!

  • @ac0d3r_
    @ac0d3r_ 10 месяцев назад

    Hello, can you enable the function of generating subtitles. It is a bit difficult for people whose native language is not English to watch videos.

    • @jiskac
      @jiskac 10 месяцев назад

      Hi :) The version hosted on media.ccc.de/v/rc3-11358-fuzzing_the_phone_in_the_iphone has subtitles. For most videos, RUclips auto-generates them, but the quality of subtitles is usually much better on media.ccc.de, as they're fixed by a human after auto generation :)

    • @ac0d3r_
      @ac0d3r_ 10 месяцев назад

      @@jiskac Wow :) Thank you very much! The video you made is great!

  • @kidabek
    @kidabek 11 месяцев назад

    Are the rest of the lectures available somewhere like coursera or udacity?

  • @kidabek
    @kidabek 11 месяцев назад

    Thanks for the useful info. I enjoy watching your videos. Keep them coming

  • @learnwithdelwar
    @learnwithdelwar 11 месяцев назад

    This is really interesting. Creative work 😍

    • @jiskac
      @jiskac 10 месяцев назад

      Thank you! 😊

  • @minghaolin
    @minghaolin Год назад

    I learned a lot from this video! Thanks!

  • @zzmegadano
    @zzmegadano Год назад

    Can you make a phone call or answer a call using a debug BT connection?

  • @xuefudong471
    @xuefudong471 Год назад

    Hi! Thanks a ton for this impressive demo. I wonder if you ever try to acquire raw radio data received by the air-tag, including amplitude/phases?

    • @jiskac
      @jiskac Год назад

      No, raw radio data is usually processed within the Bluetooth chip's physical modem. For the nRF chip on the AirTag, I don't know up to which level this data is exposed to the Bluetooth firmware. But at least on the Broadcom chip on the iPhone, all these interesting things are done in hardware and only some meta information about connection quality and active channel are available to the firmware.

    • @xuefudong471
      @xuefudong471 Год назад

      @@jiskac Thank you so much for replying! So it seems that the audio is less exposed than NFC urls. By the way, I wonder if you ever tried power an Airtag and another one with cloned firmware simultaneously. Would iPhone FindMy connects to both of them at the same time?

  • @xmvziron
    @xmvziron Год назад

    I learned about RTKit from the reverse engineering efforts of Asahi Linux. I'm curious, are you active in that project, seeing as you know a good amount about the internals of Apple SoCs?

    • @jiskac
      @jiskac Год назад

      Nope, haven't contributed to Asahi Linux, but they're doing great work! Learned a lot from them.

  • @BadAtEverything555
    @BadAtEverything555 Год назад

    Thank you for this upload. I have started my RE journey not too long ago and recognised some of the things mentioned here. Hoping to continue growing from here.

  • @xorxpert
    @xorxpert Год назад

    Hey! Amazing video! Where'd you get that amazing jacket?

    • @jiskac
      @jiskac Год назад

      Thank you! Love sewing my own clothes, my "reversing shorts" video wasn't just an April's fool ;) ruclips.net/video/cZcAvohw2z4/видео.html

  • @arturaugustyniak212
    @arturaugustyniak212 Год назад

    Disclaimer:this is subjective opinion. For sure you said a lot of real/wise stuff, but I got feeling that I couldn’t match audience profile. For people totally starting with this stuff, the jargon can be little to overwhelming. For more advanced, there were no complete example of I.e dumping flash contents. That being said, as seasoned but mostly high level programmer, I am waiting for this becoming in-depth series. For sure I’am into this “everything is open source” idea!