Главная
Study mode:
on
1
Introduction
2
Why OS X
3
The fuzzer
4
Object database
5
Ciscos
6
syscall
7
Siskel
8
Logging
9
Seeding
10
Exit Cisco
11
Library
12
Fuzz Loop
13
Scaling the Fuzz
14
QMU
15
Code Coverage
16
Cocoa Free Support
17
Coverage Information
18
In memory fuzz
19
Fuzzer components
20
Wrapper library
21
Extracting attack surface
22
Pattern matching on struts
23
Limitations
24
Modules
25
Hooking
26
Challenges
27
Open method
28
Sample size
29
UI Automation
30
Mutations
31
Architecture
32
open source
33
future plans
34
previous work
Description:
Explore macOS kernel fuzzing techniques in this 41-minute conference talk from 44CON 2017. Dive into MWR's platform-agnostic approach for identifying critical flaws in Apple's XNU kernel. Learn about developing fuzzing automation, targeting core subsystems, and addressing architectural differences across platforms. Examine the effectiveness of targeted fuzzing for specific components and discover an in-memory fuzzer combining static and dynamic analysis. Gain insights into achieving greater code coverage, efficiency, and attacking privileged components via IPC. Discuss discovered issues, future improvements, and tools released for enhancing coverage and effectiveness in macOS kernel fuzzing.

Biting the Apple that Feeds You - macOS Kernel Fuzzing

44CON Information Security Conference
Add to list
0:00 / 0:00