Reverse Engineering the iOS Simulator’s SpringBoard
summary
Walks through taking SpringBoard apart inside the Simulator and shows concrete results: about 1,400 symbol hits in one module, locating a shared reachability instance, dumping all UIWindows and the specific scroll view for the home screen, and flipping a user-default that enables drag‑and‑drop on iPhone. Uses live, reusable debugging tooling — custom Xcode LLDB commands, chisel helpers and dtrace scripts — and demonstrates the change actually working in the running Simulator.
AI-written summary · about
chapters (25)
- 0:00Introduction to tools
- 1:04Analyzing Objective-C blocks
- 3:37Block dissection and analysis
- 6:38Exploring registers and memory
- 9:34Size analysis of blocks
- 11:00Springboard exploration
- 12:36Using custom debug commands
- 14:41Class and method inspection
- 16:05Analyzing Objective-C classes
- 17:53Memory address breakdown
- 19:16Examining the BSS section
- 20:46Identifying shared instances
- 23:17Alternative referencing methods
- 24:10Simulating the environment
- 25:45Swift code analysis
- 28:33Interacting with UI elements
- 30:39Setting breakpoints and logging
- 32:40Inspecting window hierarchies
- 34:04Swizzling methods
- 35:47DTrace analysis techniques
- 37:24Selector parameter analysis
- 38:53Dynamic library loading
- 40:39Final DTrace demonstration
- 42:25Enabling drag and drop
- 45:20Conclusion and wrap up
related talks
40mIntroduction into Reverse Engineering and iOS Security
43mRuntime Manipulation of Android and iOS Applications
29miOS Runtime Manipulation (PWND)
58mUncovering OWASP’s Mobile Risks in iOS Apps
36mStealing user’s identity
45mReverse engineering mobile apps: how, why, and what now?
36mTesting iOS Apps without Jailbreak in 2018
40mStealing User's Identity