Guide to Reversing and Exploiting iOS binaries Part 2: ARM64 ROP Chains
Welcome back my masochistic kings and queens... This is PART 2 of how to reverse engineer and exploit iOS binaries. If you’ve missed the blogs in the series, check them out below ^_^ Part 1: How to Reverse Engineer and Patch an iOS Application for Beginners Part 2: Guide to Reversing and Exploiting iOS binaries: ARM64 ROP Chains Part 3: Heap Overflows on iOS ARM64: Heap Spraying, Use-After-Free By the end of this blog post you will be able to reverse engineer an arm64 iOS binary and exploit it in two ways – first through a buffer overflow, and then through a ROP chain. Once again, I will walk you step-by-step through the following: Building and compiling your own iOS binary Reverse engineering the binary Calculating the runtime function addresses without disabling ASLR Buffer overflow attack ROP chain exploitation We will only be using FREE tools because I don’t like to spend money on nerd things. Therefore, for this blog post/tutorial, I ...