Researching New Attack Interfaces on iOS and OSX
Explore new attack interfaces on iOS and OSX in this Hack In The Box Security Conference talk. Dive into the challenges of reverse engineering Apple's closed-source kernel and driver components, and learn effective techniques for exposing vulnerabilities. Discover a systematic approach to analyzing kernel attack surfaces, including methods for exploring new interfaces, conducting kernel and driver diff analysis, and leveraging dynamic tracing tools. Examine real-world examples of zero-day vulnerabilities found using these techniques, such as integer overflows, out-of-bounds reads, and NULL page references. Gain insights into enhanced kernel fuzzing techniques and the use of KASAN in iOS/OSX kernels. Learn about open-source toolchains for interface exploration and a kernel vulnerability hunting system based on enhanced passive fuzzing.