The Mac Hacker's Handbook

Klappentext:

As more and more vulnerabilities are found in the Mac OS X (Leopard) operating system, security researchers are realizing the importance of developing proof-of-concept exploits for those vulnerabilities. This unique tome is the first book to uncover the flaws in the Mac OS X operating system--and how to deal with them. Written by two white hat hackers, this book is aimed at making vital information known so that you can find ways to secure your Mac OS X systems, and examines the sorts of attacks that are prevented by Leopard's security defenses, what attacks aren't, and how to best handle those weaknesses.

Inhaltsverzeichnis:

From the contents:
Foreword.

Introduction.

Part I Mac OS X Basics.

Chapter 1 Mac OS X Architecture.

Basics.

XNU.

Mach.

BSD.

I/O Kit.

Darwin and Friends.

Tools of the Trade.

Ktrace/DTrace.

Objective-C.

Universal Binaries and the Mach-O File Format.

Universal Binaries.

Mach-O File Format.

Example.

Bundles.

launchd.

Leopard Security.

Library Randomization.

Executable Heap.

Stack Protection (propolice).

Firewall.

Sandboxing (Seatbelt).

References.

Chapter 2 Mac OS X Parlance.

Bonjour!.

Get an IP Address.

Set Up Name Translation.

Service Discovery.

Bonjour.

mDNSResponder.

Source Code.

QuickTime.

.mov.

RTSP.

Conclusion.

References.

Chapter 3 Attack Surface.

Searching the Server Side.


Nonstandard Listening Processes.

Cutting into the Client Side.

Safari.

All of Safari's Children.

Safe File Types.

Having Your Cake.

Conclusion .

References.

Part II Discovering Vulnerabilities.

Chapter 4 Tracing and Debugging.

Pathetic ptrace.

Good Ol' GDB.

DTrace.

D Programming Language.

Describing Probes.

Example: Using Dtrace.

Example: Using ltrace.

Example: Instruction Tracer/Code-Coverage Monitor.

Example: Memory Tracer.

PyDbg.

PyDbg Basics.


Memory Searching.

In-Memory Fuzzing.

Binary Code Coverage with Pai Mei.

iTunes Hates You.

Conclusion.

References.

Chapter 5 Finding Bugs.

Bug-Hunting Strategies.

Old-School Source-Code Analysis.

Getting to the Source.

Code Coverage.

CanSecWest 2008 Bug.

vi + Changelog = Leopard 0-day.

Apple's Prerelease-Vulnerability Collection.

Fuzz Fun.

Network Fuzzing.

File Fuzzing.

Conclusion.

References.

Chapter 6 Reverse Engineering.

Disassembly Oddities.


EIP-Relative Data Addressing.

Messed-Up Jump Tables.

Identifying Missed Functions.

Reversing Obj-C.

Cleaning Up Obj-C.

Shedding Light on objc_msgSend Calls.

Case Study.

Patching Binaries.

Conclusion.

References

Themen:

• Hacker
• MacOS X 10.5 Leopard; Systemadministration
• Netzwerksicherheit

Verwandte Themen:

• Computersicherheit
• IT-Sicherheit
• Internet-Security
• Informationssicherheit
• Menschliches Versagen
• Internet-Security; Systemadministration
• Internet; Einzelne Sachgebiete
• Computerkriminalität
• Datensicherung
• Cyberwar