NSO Group iMessage Zero-Click Exploit Captured in the Wild

Re:NSO Group iMessage Zero-Click Exploit Captured in the Wild by Thaxll on Monday September 13, 2021 @04:38PM (#28516566)

It takes IDA Pro, some low level asm/C++/Python programming skills and a lot of hours.

Reverse engineering is not that complicated, however getting some results is difficult and time consuming.

In that example it's basically looking at how some libraries are parsing input, that's it. Since everything in those phones are C/C++ nothing is "safe".

It's the same skills you need to crack games, cheat in online games etc ...

[ Parent | on HN ]

Re:NSO Group iMessage Zero-Click Exploit Captured in the Wild by kaladin-jasnah on Monday September 13, 2021 @04:44PM (#28516636)

It would be quite difficult if you can't get access to the binaries that you have to put into IDA (or, well, Ghidra, for that matter, but IDA Pro is probably better).

[ Parent | on HN ]

Re:NSO Group iMessage Zero-Click Exploit Captured in the Wild by saagarjha on Monday September 13, 2021 @04:55PM (#28516761)

The binaries are available in OS restore images that Apple makes publicly available.

[ Parent | on HN ]