12.07.2015 Views

iPhone Rootkit? There's an App for that! - Reverse Engineering Mac ...

iPhone Rootkit? There's an App for that! - Reverse Engineering Mac ...

iPhone Rootkit? There's an App for that! - Reverse Engineering Mac ...

SHOW MORE
SHOW LESS
  • No tags were found...

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Hardware Capture: Location• CoreLocation is cool, but requires user approval <strong>for</strong> GPS location− C<strong>an</strong> hijack a process <strong>that</strong> already has approval− … or go under the API layer <strong>that</strong> actually en<strong>for</strong>ces approval− … or … hack approval with a patch.− Investigating lower CoreLocation layers.• Poor-m<strong>an</strong>s approach:− Dump a recent LAT/LONG from the locationd cache file− Extracted from /var/root/Library/Caches/locationd/cache.plistWifiLoca9onNearby = { Al9tude = 0; HorizontalAccuracy = 80; La$tude = "41.882041"; Lifesp<strong>an</strong> = 144; Longitude = "-­‐87.628489"; Timestamp = "304907008.940135"; Type = 4; Ver9calAccuracy = "-­‐1"; }; Copyright Trustwave 2010

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!