3 ms·

I wonder what kind of infrastructure they had set up to find these vulnerabilities and extract names of classes and methods. Do they jailbreak iPhones and run f

by snazz 7y ago

I wonder what kind of infrastructure they had set up to find these vulnerabilities and extract names of classes and methods. Do they jailbreak iPhones and run fuzzers directly on the device? Do they analyze IPSWs directly? Edit: and explains how to set up tooling to test these components. I'll wait for the BlackHat slides.

saagarjha 7y ago
> extract names of classes and methods This is very easy to do using tools such as class-dump if you can get access to the binary (either from the IPSW, or sometimes directly from the shared cache).