karmaz

karmaz, 4 months ago to apple

I published another part of my notes about debugging the loading process and analysing the low-level functionalities of dyld.

So here it is: The DYLD - Do You Like Death? (II)
The lifecycle of a Dynamic Loader from its creation to its termination. Debugging Dyld and analysing its source code inside the handleDyldInCache function, starting from isBuiltForSimulator.

I hope you will enjoy it as I did while learning it and taking notes.
#apple #arm #c #dyld #debugging
https://karol-mazurek.medium.com/dyld-do-you-like-death-ii-b74360b8af47?sk=v2%2Ff0cff71c-5345-4228-a639-653325fc979d

shellsharks, 5 months ago to infosec

The 1/12/23 edition of my cool #infosec accounts I’ve discovered recently #followfriday !

• @aatlasis
• @MaxMnMl
• @karmaz
• @LeeArchinal
• @rogeragrimes
• @james_inthe_box
• @jsmall
• @prabhu
• @schrammbo
• @cryptax

Though I certainly find new accounts through boosts by those I already follow, I *mostly find these accounts by scrolling the (infosec.exchange) Local timeline. It’s a gold mine!

karmaz, 5 months ago to apple

I have published Snake & Apple III.

Inside, you will find an explanation of the various #binary #protections on #Apple #Mac (#macOS), how to #detect them and #assess whether they are configured securely or not.

This #research results in several new #tools written in #Python, which, as usual, you will find in the repository. The most important of them is the #checksec module for #CrimsonUroboros.

Enjoy reading! 👨‍💻

https://karol-mazurek95.medium.com/snake-apple-iii-checksec-ed64a4b766c1?sk=v2%2Fb4b8d637-e906-4b6b-8088-ca1f893cd787