News for hackers. Stuff that matters.

A comment on WiFried: iOS 8 WiFi Issue. Parent comment

Re:WiFried: iOS 8 WiFi Issue by conradev on Tuesday November 25, 2014 @07:37AM (#8657431)
Sure! It's a combination of static and dynamic analysis. I have a jailbroken phone, which allows me to access any file on the filesystem and decrypt any App Store binaries[1]. The first step is to find in which binaries the functionality lives. I know from searching that AirDrop lives in Sharing.framework[2], which has a supporting daemon, sharingd. Then, I open the binaries in a disassembler like IDA Pro[3] or Hopper[4] to determine how they work. Running class-dump is also helpful[5]. If I need to inspect a process like sharingd at runtime, I use Cycript[6], which gives me an Objective-C REPL into the process, or LLDB[7].

[1] https://github.com/stefanesser/dumpdecrypted

[2] https://github.com/JaviSoto/iOS8-Runtime-Headers/tree/master...

[3] https://www.hex-rays.com/products/ida/

[4] http://www.hopperapp.com/

[5] http://stevenygard.com/projects/class-dump/

[6] http://www.cycript.org/

[7] http://iphonedevwiki.net/index.php/Debugserver

[ Parent | on HN ]
Re:WiFried: iOS 8 WiFi Issue by coldpie on Tuesday November 25, 2014 @08:59AM (#8657700)
Oh crap, I didn't know IDA was free for non-commercial use. I thought it was like Photoshop: prohibitively expensive for most users, so everyone pirates it. I'm going to have to give that a shot.
[ Parent | on HN ]
Re:WiFried: iOS 8 WiFi Issue by edeion on Wednesday November 26, 2014 @05:50AM (#8661813)
Maybe you'd like Radare, which is free software. http://www.radare.org/y/
[ Parent | on HN ]
Re:WiFried: iOS 8 WiFi Issue by coldpie on Wednesday November 26, 2014 @08:47AM (#8662240)
Thank you for the link.
[ Parent | on HN ]
Re:WiFried: iOS 8 WiFi Issue by TillE on Tuesday November 25, 2014 @09:29AM (#8657821)
An old version is free, and lacking the decompiler. It's a good tool, but it's really not IDA Pro.
[ Parent | on HN ]
Re:WiFried: iOS 8 WiFi Issue by reubenmorais on Tuesday November 25, 2014 @09:42AM (#8657874)
IDA is not the expensive part, the Hex-Rays decompiler is. A single license can cost up to $2000 :(
[ Parent | on HN ]
Re:WiFried: iOS 8 WiFi Issue by udalov on Wednesday November 26, 2014 @06:23AM (#8661877)
The free version is also Windows-only
[ Parent | on HN ]