Showing posts with label AppleiPhone. Show all posts
Showing posts with label AppleiPhone. Show all posts

IDA Disassembler on the iPhone? Yep.

Sunday, July 27, 2008 by Mzer0 , , ,

Ilfak Guilfanov has reported that IDA has been ported to the iPhone. Unbelievable? Yes. Is it useful? Who cares! IDA on the iPhone is hot!

Don’t act like you don’t want IDA for your iPhone, you know you do.

From the “Hex Blog”:

Good news for real iPhone fans: we ported IDA to iPhone! It can handle any application and provides the same analysis as on other platforms. It is funny to see IDA on a such small device:

Ilfak says only the heartiest of researchers and iPhone fans will use it as the interface is clumsy and done through terminal emulation. Here’s a shot from Ilfak’s blog on the tool actually running on the phone:

All I can ask is that this soon be sent to the Apple App Store or linked to in some other way, it will be the first thing I put on my new iPhone.

To Ilfak, well done, you’ve made my Friday!

[All images courtesy of Ilfak’s blog]

[Source: zdnet]

0 comments

 

Fresh off the press: iPhoneDbg toolkit hotness

Thursday, June 19, 2008 by Mzer0 ,

The guys at Core Security just released an iPhoneDbg toolkit that should make exploit development for the iPhone much easier.  This is outstanding news for all, as I think there has been a lot of concern over the quick rise of mobile devices and the new security concerns that they create.  The capabilities of this debugger will allow researchers to work with discovered issues to determine if they are exploitable or not.  Combine this with the mobile python capabilities out there, and you should be able to whip up a nice fuzzer/debugger combo for testing out the iPhone.

See more below.

From the Core Security site:

What is the iPhoneDbg Toolkit?

This set of tools will enable you to delve into iPhone Binary Reversing.

  • The iPhone Debugger allows you to debug running or newly-created native processes inside iPhone.
  • The Library Loader Patcher will allow to debug iPhone libraries.
  • You can also build a tunnel from your PC to your iPhone through USB.

Requirements

  • iPhone firmware v1.1.4, should work on earlier firmware versions (drop a line if positive).
  • Some iPhone Console application (local Term-vt100, remote OpenSSH via WiFi or remote OpenSSH via USB).
  • (for the tunnel only) iTunes on a Windows XP installed and service Apple Mobile Device ( AppleMobileDeviceService.exe) running. DLL iTunesMobileDevice.dll must be on the same folder that iphone_tunnel.exe.

Binaries and Source Code

Documentation

Real Life Example

  • We run Safari web browser in the iPhone and we list all the active processes from a console connected through ssh.

  • We write the command to attach the debugger to the Safari process.

  • Once we are attached to the process, the debugger loads all the process symbols and then waits for user commands.

  • We execute command g (go) and the process continues its execution waiting for some event or exception.


[Source: Zdnet]


0 comments