logo

Booting the iOS Kernel to an Interactive Bash Shell on QEMU

Conference:  BlackHat EU 2019

2019-12-04

Summary

The presentation discusses a research project that aims to create a virtualized iOS environment for security research purposes.
  • The project involves creating a virtualized iOS environment for security research purposes
  • The virtualized environment is created using an emulator and a custom kernel
  • The project aims to support more iOS versions and devices, as well as implement IP communication and support for non-RAM disk disks
  • The presentation includes a demonstration of how the project can be used to research vulnerabilities
  • The presenter does not expect any legal difficulties with Apple
The presenter demonstrates how the project can be used to research vulnerabilities by showing how a voucher swap vulnerability can be exploited in the virtualized environment

Abstract

Booting the iOS kernel on QEMU with an interactive bash shell and a live debugger attached to the kernel. A major step forward in the direction of having a full iOS open source system emulator on QEMU. The research details and demo will be presented in this talk.

Materials:

Tags: