Function Hooking for Mac OSX and Linux
Joe Damato - Function Hooking for Mac OSX and Linux This talk will cover three different methods of function hooking for Mac OSX and Linux.
Summary
Architecture and Background
Joe Damato - Function Hooking for Mac OSX and Linux This talk will cover three different methods of function hooking for Mac OSX and Linux.
Vulnerability Analysis
The talk will begin by describing useful bits of Intel64 assembly followed up with 3 different binary rewriting techniques to hook a range of different functions, including some inlined functions, too.
Exploitation and Demonstrations
We'll finish up with a demo of two nice things that these techniques make possible (a memory profiler and a function call tracer), and one slightly more evil thing.
Remediation and Defensive Strategies
Joe Damato is a systems programmer who spends his days hacking on the Ruby VM and tools for analyzing the performance characteristics of complex software systems. He maintains a blog ( where he releases code, patches to the Ruby VM, and his thoughts on low level systems programming. He maintains memprof, a Ruby level memory profiler and added support for libdl to trace. For copies of the slides and additional materials please see the DEF CON 18 Archive here:
Related talks
Main Stage·13 min
Alexander Minozhenko
Alexander Minozhenko explores how to hack vmware vcenter server in 60 seconds at DEF CON 20, examining penetration-testing and practical defenses.
Main Stage·1 hr 5 min
Dan Kaminsky
Dan Kaminsky details black Ops Dan Kaminsky Chief Scientist, DKH If there's one thing we know, it's that we're doing it wrong.
Main Stage·41 min
Dustin Hoffman · Semon Rezchikov
Dustin Hoffman and Semon Rezchikov details busting the BARR: Tracking "Untrackable" Private Aircraft for Fun &Profit Dustin Hoffman President & Senior Engineer, Exigent Systems Inc.