Skip to main content

Recently Updated Pages

Lesson 18

Japanese Language Notes N5

语法 「一类形」なります 一类型 ~くなります   「一类形」します 一类型 ...

Updated 1 day ago by winslow

Lesson 17

Japanese Language Notes N5

语法 「名1」は「名2」が欲しいです 表示愿望。名词1 是愿望主体,名词2 是愿望的对象。 わたし は 新(atara)しい洋服 が欲しいです。    我想有套新西服。 あなた は ...

Updated 1 day ago by winslow

Extend Network Access

GXPN Book 1

Manipulate the network With Physical access: Coerce the network Overcome switched traffic is...

Updated 1 week ago by winslow

Intro

GXPN Book 1

post exploitation = everything after the first exploit, including lateral movement, escape and es...

Updated 1 week ago by winslow

Inject a Dylib

OSMR Mach Microkernel

Prompt Mach Thread to POSIX Thread Threads are implemented in the Mach kernel, and each thread b...

Updated 2 weeks ago by winslow

Inject execve Shellcode

OSMR Mach Microkernel

Use codesign to verify the code signature of the app and its entitlement.  The entitlement...

Updated 2 weeks ago by winslow

Injection via Mach Task Port

OSMR Mach Microkernel

Remote Code Injection  Get the SEND right of the task port of the process  Allocate m...

Updated 2 weeks ago by winslow

Concept

OSMR Mach Microkernel

Mach: One of the fundamental components of macOS. Limited to managing only the most basic tasks, ...

Updated 2 weeks ago by winslow

Dylib Hijacking

OSMR Dylib Injection

Another way of injecting code is by performing dylib hijacking or a dylib proxying attack, which ...

Updated 2 weeks ago by winslow

DYLD_INSERT_LIBRARIES Injection

OSMR Dylib Injection

Many elements of access control depond on the app's signature, especially the embedded entitlemen...

Updated 2 weeks ago by winslow

Bind Shell

OSMR Shellcode AMD64

C code for a bind shell:      socket(2,1,0)    reserve space for sockaddr_in:  ...

Updated 2 weeks ago by winslow

Command Execution

OSMR Shellcode AMD64

Use /bin/zsh, full command /bin/zsh -c <COMMAND>  Need execve syscall  RDI   arg1: /bin/zsh  R...

Updated 2 weeks ago by winslow

AMD64 Shellcoding

OSMR Shellcode AMD64

Convention:  RDI: arg1  RSI: arg2  RDX: arg3  RCX: arg4  R8: arg5  R9: arg6  Stack: Starti...

Updated 2 weeks ago by winslow

Dynamic Analysis

OSMR Binary Analysis Tools

Tool Suite: LLDB Hopper dtrace    MacOS is very restrictive when it comes to debugging. The per...

Updated 2 weeks ago by winslow

Static Analysis

OSMR Binary Analysis Tools

Tool suite: MachOView, otool, codesign, objdump, jtool2    Display basic code signature info:  ...

Updated 2 weeks ago by winslow

Objective-C

OSMR Intro to macOS

Primary language for develeping macOS application.  Objective-C extends the standard C programmi...

Updated 2 weeks ago by winslow

mach-O File

OSMR Intro to macOS

Universal Binaries  Mach-O, a file format for various program files on all Apple platform.  Ran...

Updated 2 weeks ago by winslow

Debug

OSMR

Updated 2 weeks ago by winslow

OS Architecture

OSMR Intro to macOS

High-Level OS Architecture  XNU: Mach microkernel, Components from BSD, IOKit, Kernel Exte...

Updated 2 weeks ago by winslow

Unit 4

Japanese Language Notes N5

课文 吉田課長は今居酒屋(i zaka ya)でビールを飲んでいます。    吉田科长现在在小酒馆喝着啤酒。     吉田課長は東京の郊外(kou gai)に住んでいます。結婚(ke k...

Updated 2 weeks ago by winslow