SCS3 2011 Bachmann iOS Reverse Engineering.pdf

(2707 KB) Pobierz
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
iOS applications reverse engineering
1
Julien Bachmann – julien@scrt.ch
870494551.003.png 870494551.004.png
Agenda
› Motivations
The architecture
›
Mach-O
›
Objective-C
›
ARM
›
› AppStore binaries
Find'em
›
Decrypt'em
›
Reverse'em
›
What to look for
›
Where to start
›
Remote connections
›
Data protection
›
› Conclusion
2
870494551.005.png
Preamble
● Security engineer @ SCRT
● Areas of interest focused on reverse engineering,
software vulnerabilities and OS internals
● Not an Apple fanboy but like all the cool kids... ;)
● Goals of this presentation is to give a state of the art, in
45minutes, of my knowledge about iOS applications
reverse engineering
● Motivate people to do more research in user/kernel-land
iOS reverse engineering
3
870494551.006.png
Motivations
4
870494551.001.png
A few numbers
+160 millions iOS users
›
+400 000 applications available
›
› +10 billion downloads
→ (modestly) large user base
5
870494551.002.png
Zgłoś jeśli naruszono regulamin