Kupreev Oleg & Putin Vladimir - Your very own driver for the custom NVMe device from the scratch: reading of the flash memory of iPhone 7

0c988f4618b436b14ce6ddcecd52d11d?s=47 DC7499
February 10, 2018

Kupreev Oleg & Putin Vladimir - Your very own driver for the custom NVMe device from the scratch: reading of the flash memory of iPhone 7

0c988f4618b436b14ce6ddcecd52d11d?s=128

DC7499

February 10, 2018
Tweet

Transcript

  1. 1.
  2. 3.

    Research plan 1. PIN + SWD = Debug 2. Native

    driver code 3. iBoot and iOS drivers 4. Own driver development. Donor wanted. 5. OSX driver: C++ derived class. Super class. Driver dependency loading. 6. Linux drvier: patch standard driver to allocate DMA buffer 7. What is hacking and reverse engineering? 8. Bonus – iBoot bug hunting success story
  3. 9.

    Thunderbolt time Sonnet echo board bought from underground store… …

    to run NVMe under OSX. Main idea: NVMe controller for MacBook NAND is the same.
  4. 15.
  5. 20.

    Reverse Engineering = HardwaRE + SoftwaRE 1.Hardware analysis 2.SWD debug

    3.Existing driver code analysis 4.Own driver development 5.iBoot dump 6.iBoot reverse 7.Platform attack
  6. 24.

    BUG up to source code Exists in iBoot up to

    iOS 8.xx NULL pointer dereference – non exploitable