Reverse Engineering Airplay
summary
Claims that AirPlay is fully reverse-engineered AirPlay enough to emulate an Apple TV by advertising services on the network, with only the needed ports implemented (RTSP/RTP on 5000/6000, AirPlay on 7000). Uses Wireshark plus a traffic-mirroring switch to capture exchanges, reuses an extracted RSA key history, and implements reusable Node.js modules published to npm. Demonstrates a photo-drop webserver that receives JPEG streams from iOS Photos; demos work but occasional crashes and missing mirroring services are noted.
AI-written summary · about
chapters (10)
- 0:00Intro
- 0:35What is AirPlay
- 1:24First generation of AirPlay
- 2:01Second generation of AirPlay
- 3:00How does AirPlay work
- 8:15Technical details
- 13:12Packages
- 14:20Airplay
- 16:47Picture Tube
- 18:58Photo Drop
related talks
41mA Worm in the Apple: Wormable Zero-Click RCE in AirPlay... (Avi Lumelsky, Uri Katz)
34mTowards Discovering Remote Code Execution Vulnerabilities in Apple FaceTime
42mDiscovering and Exploiting Novel Security Vulnerabilities in Apple ZeroConf
40mTrust in Apple's Secret Garden: Exploring & Reversing Apple's Continuity Protocol
32mThe Evil of Spy Camera
27mReverse Engineering a Web API
15mCarPlay at Risk: Unveiling Security Threats of Third-Party Infotainment Adapters
27mReverse Engineering a Private API