Mach-O Fun
summary
Explains concrete tricks with Mach-O: reading the header and load commands to find a 19 load‑command executable, scanning every loaded image (about 360 modules) via _dyld_image_count, using getsectdatafromframework to extract C string sections and recover hardcoded HTTP URLs that strings misses, using LLDB scripts to enumerate heap objects and swap lazy symbol pointers to hijack behavior, building an interpose dylib via DYLD_INSERT_LIBRARIES and a UIKit patch that enables the hidden UI debugging overlay — demos run live and succeed.
AI-written summary · about
chapters (10)
- 0:00Start
- 12:46Cpu Type
- 16:20Load Commands
- 19:18Lldp Commands
- 21:34Reverse Search
- 32:20Resolved Function Pointers upon First Call
- 34:48Function Prologue
- 36:39Build Script
- 39:39Uikit Injection
- 43:50Gesture Recognizer
related talks
01h 08mPlaying With the Limits: Can Your App Run Arbitrary Binary
05mMachObfuscator
53mFuzzing At Mach Speed: Uncovering IPC Vulnerabilities On MacOS
16mIntroduction to Procedural Debugging through Binary Libification
22mThinking Outside the JIT Compiler
43mDebug for Bug: Crack and Hack Apple Core by Itself
40mIntroduction into Reverse Engineering and iOS Security
57mExploring Yosemite: Abusing Mac OS X 10.10