I use it to collect some statistics about Mach-O binaries and also to find which binary to infect in my PoC virus.ġ0 Reversing in OS X - what s different Mach-O file format. Very simple! One header, with magic values 0xFEEDFACE (32bits) and 0xFEEDFACF (64bits). And then data.ġ2 Reversing in OS X - what s different Code is located in TEXT segment and text section. Linked libraries in LC_LOAD_DYLIB commands. The entrypoint is defined at LC_UNIXTHREAD or LC_THREAD. Structs described at /usr/ include/mach-o/loader.h.ġ3 Reversing in OS X - what s different Fat archive: Allows to store different architectures inside a single binary. How to crack macbook pro os x 10.9.4 kali archive#įat archive related structures are always big-endian! The lipo command allows you to extract a specific arch.ġ4 Reversing in OS X - what s different Syntax: lipo thin output fat_archiveġ5 Reversing in OS X - what s different Objective-C. An extension to C language that enables objects to be created and manipulated. Rich set of frameworks: Cocoa, Cocoa Touch(iOS). Syntax of methods: ġ6 Reversing in OS X - what s different What happens on execution? There are no traditional calls to functions or methods. Instead, messages go thru the objc_msgsend function. id objc_msgsend(id thereceiver, SEL theselector.) There are three more message functions, but objc_msgsend is the most common. Check Objective-C Runtime Reference documentation. Also nemo s article at Phrack #66.ġ8 Reversing in OS X - what s different Those messages can be traced: With GDB. Nemo s article has sample code for the above solutions. How to crack macbook pro os x 10.9.4 kali code# Set NSObjCMessageLoggingEnabled environment variable to YES and messages will be logged to /tmp/msgsends-pid. More info at Technical Note TN2124 Mac OS X Debugging Magic.ġ9 Tools overview Quality, quantity, and number of features of tools lags a lot versus the Windows world. How to crack macbook pro os x 10.9.4 kali mac os x# This is slowly improving with increased interest in this platform. Download Apple s command line tools for Xcode or the whole Xcode.
( requires free Apple ID).Ģ0 Tools overview - Debuggers GDB. How to crack macbook pro os x 10.9.4 kali code#įorget about GNU GDB 7.x!Ģ1 Tools overview - Debuggers GDB is my favourite.How to crack macbook pro os x 10.9.4 kali archive#.How to crack macbook pro os x 10.9.4 kali mac os x#.
0 kommentar(er)
