macOS:iOS Kernel Debugging and Heap Feng Shui
Kernel debugging techniques and heap feng shui methods for iOS and macOS kernel exploitation.
Summary
Kernel Debugging Challenges
Kernel bugs are difficult to reproduce and often cause system panic. Kernel debugging is necessary for panic analysis, but kernel code cannot execute in debuggers, making tracking difficult.
macOS Kernel Debugging Kit
macOS provides powerful kernel debugging through KDK (Kernel Development Kit). This tool assists in analyzing panic scenes and developing kernel exploits.
iOS Kernel Debugging
While iOS lacks official kernel debugger, kernel debugging is still possible through leveraging tricks and techniques. The presentation shares kernel debugging methods specific to latest iOS/macOS versions.
Heap Mitigations and Bypass
New kernel heap mitigation mechanisms on iOS 10/macOS 10.12 are analyzed. Two novel heap feng shui techniques bypass these mitigations. Concrete kernel heap overflow bug debugging demonstrates leveraging new heap feng shui to gain arbitrary kernel memory read/write on iOS 10.2/macOS 10.12.
Related talks
The Linux Foundation·1 hr 31 min
Evaluates mentorship Session: Linux Kernel Debugging Tricks of the Trade and evaluates key implications for security practitioners.
The Linux Foundation·52 min
Sergio Prado · Embedded Labworks
Examines linux Kernel Debugging: Going Beyond Printk Messages and evaluates key implications for security practitioners.
Videos·27 min
Explores play fuzzing machine - hunting iOS and macOS kernel vulnerabilities automatically and smartly and evaluates key implications for security practitioners.