We hacked our way to executing an interactive bash shell on iOS on QEMU. We based the research on the work done by @zhuowei. Thanks!https://alephsecurity.com/2019/06/17/xnu-qemu-arm64-1/ …
Does iOS low-level software components (SecureROM, LLB and iBoot) support could be possible ?
-
-
We are not focusing on that at the moment and plus it's encrypted and therefore harder to get the binary code.
-
DM me, then
Kraj razgovora
Novi razgovor -
-
-
You need to emulate all hardware that the firmwares will hit while running.
@CorelliumHQ does it with a hypevisor. You'll need to RE the firmware to find everything, or iteratively run it. Some qemu patches were required here, but patching the device tree was a big part of it.Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.