Record · corpus.blog/posts/01a08787-f2db-71d9-933b-e1799b271c22

Heap Overflows on iOS ARM64: Heap Spraying, Use-After-Free (Part 3)

inversecos.com · published 13 July 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at inversecos.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 49
Words captured: 3,371

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIMr2yftYRYAA1M0OdFCbz-lXqGlBR9MVRSyBIK2qbTQGZaSZAaNq6pENYaxcQTHHNV7SqaEG9390dfhEu1Eh5gunp-Kyhdc0ilwqgQCZAJedrAc-QYTwTrtjkHxUtQHIKvOWAGtUEVYf-jyIaryikkij7nkmrm_lqV5teilVKlatKNC4ScRDDqpQP6g/s2730/Screen%20Shot%202022-07-11%20at%201.18.46%20pm.png

blogger.googleusercontent.com

How to Reverse Engineer and Patch an iOS Application for Beginners: Part I Read at the source ↗

inversecos.com

Guide to Reversing and Exploiting iOS binaries Part 2: ARM64 ROP Chains Read at the source ↗

inversecos.com

https://github.com/inversecos/ios-moneymachine

github.com

https://www.youtube.com/watch?v=z97qLNXeAMQ&ab_channel=100gecs

youtube.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgueX3_-_pG3tbBPS3Unjay-MI3fZqEyDeXsBfC48SLsitYL8psitVYRmz78Hi8bXPjqnl7GavJg5huFlt3-pbiRJ6bM_GFi58fJ_uRuE6M5BUblCoYDz469lMEIP_Li-X8YY4_KtJXQD4Xcbt_ajkux7ORGPp8cOWCELnwlipA1hU62Ewh3k8_GZFCwg/s2156/1.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0uPZH8k3oM4U4vEsay45clSH8pSuYuBMziTjJ6hct0RGHQYBQqjlzRdNtYm5LDce2Wj9goO_ixnPSxVIKmpuGnvJSWws32EUQ0LM-wMzs5zeZz0oLYmEMoAwCuIZ9eEudg0jdRWpSOQKXalwMGBzNepOtR7dxWx6S7UfXmJOnIzNCiX4Y5_7cUTj5_g/s1058/Screen%20Shot%202022-07-11%20at%201.30.55%20pm.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLzjQiQivFE0Yn-fOlLyKmFKawFUw4lYCOxATus4sf-6XokOTGo3rb4r8T-O0gr7ZQhKmIHkfIC66oq7z8m_O5Fn3_0KAgsNuoD_nX3w06BXLzizOCRbaHZgtimY2KHJ1WsBWgFnSFvSzUebY1-sUB95hmIFR1G2H3x0XR_ceijbdrpaw9O2DD-qB92w/s944/Screen%20Shot%202022-07-11%20at%201.31.05%20pm.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH3QFDdFJxdHmA00uSztoT1QGetZ-XBU-sS7QDB5jjLt421ffAahGKBgMYhbrCDwtyw17JIRLvmiLZm36na5vklTb-_LvhuRvYPT29GavfHlC72jVpTIx0BFBnf2b1pupaMMCIkCwXfw2_hLdh1-39atfQ2ul0Uj6LOFJF5sDFJvuwOAfnP2MR_lKWbQ/s1334/Screen%20Shot%202022-07-10%20at%203.46.24%20pm.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhs4KXXn1AQgQ4neuzvb76pdKEk_YIwMRkFXNwN6dTgnUa2x1BCsqOg633GJuEudvidU5qj7r68XX5A6pi4CPcskN75tj3hd_OWHsR6-auF6tllPPg_DNlNanDQwgSh_bNUE9sgvkv7D1-90gdawYXBlefDNGLN6oCUnV86ChHtfQvuTdtDbS6vb-7IPQ/s675/7.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGyKsglMNnjP6gNJkvSske2FobUYYSAyOv2aul4Qccmr5IcEcixDbXyabhMNRZdiELMbQCfKLO4lJOd-jEt7-GKqV81wfbNrpw9R60RUcNpGrFG__wb-6bBRU6doVZSLO2w2gRiBYCWXvHqW_K-HEv7YoAf6MfOpSuuG86TYg4AD7yW7LxIxArW7NCRw/s2090/1.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHYKJgOoKG2SyxSIb8ACO0VGJbFlScpCX9y91Y8lVAp_AFb_ztFT8zuFVpEJOadwLvbNfDmFSKzZcqnzCjX3fYbhnf9VF1mtphmLCKLFzqHu9pQtqhZMehINP9gUhEwxUDiDFVdhBV4ym7wrUpHKJCR2w-SPKjDJSYqvx1-9Kmax__89tbaGI9BpBb1w/s2364/buyitems%20comparison%20to%20999999.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjsWmGpFXLHGyCuFPxGnPdB-eQeKSOoHBIJ62BcImZIeEMr1ypfWlmLR1NGTEpjL9cRdR_a-uUR54KIHRCnYu4y6IfLs1d5pSFhgDBFXOvOPsLK_kC88vgChS2MWZDvoeR2eSU_hsQ9FF8bOkvLBQu5y-cZ-v39jXVBNcGJfwb8YXtzloBvYS9nzhVMyA/s2654/buyitemCode.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibAlCr5NbmhHeTyiU9m-vLwdfH_cyfcUNBSm05eI-MFh5OLG4AS2M3CxO959x6ZqI8IZpyKmqleMWRRRNWAA4kwdmoIqwsEaoBRLcdCgTJ9i7kNqc-S62wivtvm77fgJCw1MPYUCAoXkynvTdpxSo0JghEA_wPWKfJIHEQCPObegJHM2QZqzJUeFn9fA/s2404/makeitrain.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgyXKqDIH3qFNL3yVVkMDnbksLwvHOg__Q5Z8kQRDIKba5MSIHBNWoiFamm6yljEpo6cwe8HskSyg9zU0n8a3pnUwEVEKiHUf84f5ONHgLX5yJ2GH02QmO5bj-Xggq8Zbfneh3yPDXWvYOUa-RvkS-WN-ncFJVG6CHgPKdoUUNGVCAmL1Ats_4kreDvfg/s977/Screen%20Shot%202022-07-11%20at%205.20.16%20pm.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHpAbT4qoES5rNstl6_7_XIx_zn9t498df42nhpELb1iiAeG0-ALDsSh5YDvqbSIEDKHjg8AZ1oYr_VM_ywCak6z_34eAfYGpXAVLkCoqXrf8v2b9FcAZ3CIzuVf2G4V120_4lWgfvx5Sw1no2_yL6BqrGT61byj4c4epl69NDyWvLUg4FnJIW6CCp1g/s1346/Screen%20Shot%202022-07-11%20at%205.40.13%20pm.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivD2kv7wROfbBY7RH9u4UdQX6goJeXbc6iqqvrfbtNvHuXqY7IH682Egt7AnIOuTtTVTueAfDZUVnzFNwtkAUXvxePkovzksX4y5zB2_yn5yvyaQiKvp22qPXg85N9xZ900GT8Hhd5I-xKZtZ0DVsBHCA-cM8um_hpgWgEIphpEx1GgzYz1kCAGlEUZQ/s739/Screen%20Shot%202022-07-11%20at%205.37.20%20pm.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9I_fddXb3gGH6xb15leb1m02jaPezoAKbHEj0GOm6cnVX3Qr3KFDpkvQIK6JBAlKn8QGHcIHmuWwcB-CfDSStGbVMWD2vLaQRMQBop_9XPuZm_UN_13wrdtLWGCRxKg2AdvhTliFLHJH3qweyciYxbgGXqc0lvFmxpXFA_eFHPHukCx61cS1PCVMW8w/s944/Screen%20Shot%202022-07-11%20at%201.31.05%20pm.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-ky3Bv_9TcxsbZQWM2Mz2t5rtW7Rq_fu5-dD1-PKjdKX_uaF6QhZQnKaQm00hWcOHP9nPwgA6unUuASoLmySgy7Jv0T3l42OLexbGybCR77gNvnsPwIbwqPFfiWp8mOn8NARMiWZShbiTBSuzEZw2vhbRaUPpEMt5W0irs-SSzBJ-W5JDswhUkNRa0A/s1610/2.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNFXA0GBOdqJKhgYeWsvvKUzwPqfaTDaYOgpe3nKtcvDn1rEOaF4_cPTkEsi5cJVYygx6OaBOIn8CFlBqESwUXr2YPdr875z9evD0Ei2nx1rS__AA_2G0-zTpAxvrM9QkW9j-g9dAkiI5gflJajhZ495bTwVbnsL_9d2FwxvHA_g_LQijQtBAa-Q9_BQ/s841/1.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8jpROBGZZc6cxyMVgSG-w7Oun3FsbcrW479ay6nVfvdTMXOmf6YWht_rfjiuSPjOypUIJmKPHHCpHa0hjj8xd9iHdfkExgnK0YuuFhfXCqo7PlRvH16ieFH1RnwM1gL9eaIFG7LT3AyOC8M3hly3VxJTc6VsrZkfmGImYCWv0gqFaDgXwKnB3u-eCKw/s575/4.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQjCvzwesjqaCSaNKlsg4kez67AoEVjWAIwByjeH_5NaaIDFV4nQwzkdkMYuq5xS7PwSAYI0aBZjuUO1HxbpcxG-_1ulcNkN7eOzSqzfaXlHrHOuMM6kSswPg24493tB3GpIrz5vlIb8VJCfOlzpCqepBMc6M0SRDHC2QriR_u_1F6nduhb3dgyD7s9A/s804/5.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioHj-ODeJTi8VaHbUlUUKrlzznBkkDzf7qHPdU1_wfpnHfmIXIzz434CT-yPasKSa6wgTWKCyW2xbX6bwaQwJc-PjgpFFyj_6pubsY8_gUwVXBb1eEZrlGR-l6Af-bvSAwfSM7A7fnBjJha5afKTyTS8NzBitYdW3fFGQIn-dDzWOOhRWdRXS6WhrjUg/s797/6.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAMbnXCgERBRbQQcoGcbVt4RUYFOy-_j87tdd9_ksUlmVOeWCAzB0sdbcLuoau5f37D9xm_uIoej5Ul7T9HPJay-YP3AeannoCCpxLjdQOeT9NbOBJBsFG3EanZr6UMENOeeQ9dcO0ifwpP2ZTG4124ar6dG3ruVNuxjA_TaLug35kOumHSGQiiafSZw/s806/7.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrDYGQwIFlbKSZEV-6JcMopMhIrScnFhxWRwPyM2qvfuqniduCFZ7jft5u1tOWJX19DgsHdHqxf2WTid9oBTCX61gzQsG5mSRDFUvygNRHeYUoCndGZZfNITsGaurywbPhG8K007YHNIkF-7qMzQZYub23yOJlxt0pOwqPlOwwggNhfp6ni1t32Ys87A/s803/8.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuVOcralFKLjg3DHLLHRJig9mvESkkYTqavmQB7g-ClY8eFIlRAw6yDTinSouepN6UMy6EIXXiNigG1xED3KHSt6L4cdV7A5AYW9QivwViNBgHgR0AgDIorDWGliF8yJAa965qsZtHbxVT-wr178h3uuRXZVSKlJderVUqn1Ic5GIep9SZYh8osu7m3g/s1143/9.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinp-59sTTaWDQZsWuey-bUK3s179ojb_CnlJtNgDBbUa6UbQNMc9MyIlU74xvbchhMDiquv4p6nt77qLbVzfd42imyPjjd0c-tIIUqaTJmVyONfjNUQua7dyNlcPVJ-tbnEBVsMf3mn0iNNmO7AAYb0EzJjtq5Whgw-LqKM05Wrsj1Cj5AkAfe5aLPQw/s721/10.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0Ouc5QvQSQBV59rzthkEnmpyG4UNOQusBistZVxOvhq4Fqw9CJ3FNX7x7oO0SwJIK5zKcdg7Gjw6U_WNhuoRBHu6J1EeyUHJaNhbpEPiXXc79rdLajC_z2DFKh0IRQ965_14x7hVasnI6UBV0lrUtGECIZlQe82QDxomSqeLnyHozBIEfOVMoMi_71w/s638/11.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsv8uaVHbp64F_2s99tfwTVrp9hBrsQW_iwDwtV3WXhlFqbCmWkNH_28RtEt-n6Tdtm7Zl5dW1INhPMoUrJ2fPiucnegUSE0NaqBDNGwRZVJNDL_R6TbBsrarbrwhyeGiCtEDwdPnODzazuqPvItx5mSk4NAHWULwHXjO7F7jsd-B_stk30qEiJ5dKaQ/s362/12.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7YrNA7CNIlCh0OJkr89cHuiw-VAbZW1nySMyPZik-Azh4JlkbwBFfdudRLWMx_fYjhxmltbeGko0EBc7Y6SwkvCw1LusSEF_jtA7oAp1h5Q02BtOlAvJVgPyw5ToiJPs86w5ADXnkMVU0-qtogFXcBfYSdZCMfpJI3mh1ojKv7kxUmXCKaCyRGJ5qAw/s673/13.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLLfghWgwOJ9TtaTyIvAS0zuKcvsNTKESGquYXZTnbUqhawTdIpWNzZT-66TK5ZfPfuViQhItcZTsvegTSE0EPJEmprv_6N1ZASizGlBvCGLtdQirDhCSnGgg_ZIuONCQkG558PhKU6PeauTD9f8-1V2fqB_mjs3OrAIeKdkNdqozv4ffISeDiCNWufQ/s531/14.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgF8yH8LW01qIBLKrj881Lzrkb34fBvEShdeN1Pt9_oS0_pUIyDnlHeHmOjYUSIEPOwXqy7lymmDfDn_nKKoLc3YKf_ZSJLfeC4SgloixJAw8OrdUsho_PByVf9EL9_MpGdVHcqSKsfzIZDcLVA4AHmQmriQa6f4ZCWT3dbYceTR_4Vdb_1-dxgD9Yu8A/s1776/15.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguIGDOagTkue1TqYoU70ShV3BoRHUPHwmWaoRnllWvjm62sWF7W9_iFQeGRsWkcSHnIQkuyBbcr9kQzFVBctKuZmGr1k2JUj6FT62V5XIeTIEDFUS8f9k1bmuoBSw4HfK2hiGFm1l73BktQiJ2qUwVuWkBqyQqCPjyvtUdPewj9fYiETueRm8bw06X1Q/s1618/16.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGEUigc7qfQnPOMbizeywVJfyBDyZIkPmeF0t2EdOuqF5LJBHfUuDGI28J-ctnHycGQLFwio-NpHd0A343qmcawe8SACCtJyYFGTYO47zWLEBX4rqYQfwPtIxPKjfp8Xb2O7myD7ozFLiefiqhDnO1fhPUzNNZGFvTIPIWG1cBXpSWVTuytO2z68tfeg/s1089/heap%20address%20change.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKJ7rN0gg_xaHdmEjPHa79t8T2pSdU67U7BgdBTMkaFU-B-7qPo0UaP9aPuutLOGciJphWSmQvnay_B16nEIZWWVPuV3ZloueNUXqmTmrjFe9_1ex60-hssiekyYJQ6X335AeFtnSr2Egt38-Tx_ev3TuMZXWuCYLfyi74Bz7p3-iaIUUAdSaySATsTA/s643/Screen%20Shot%202022-07-11%20at%206.34.52%20pm.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTfXMUgnV6oPqE3IK95EDg9r_VZu6vv3ed1IlA3mCfYgekjpKQOmKQaDGSch95B5ZLI88kbQ-RFKbeAzyVZiHFnLH7rOLXHU5O56ft5J3L5tfHNYe7cezgqdx9vsvYkruNsYWjedI4bcYcUAUI7TtXgOA_OanUoUwIKD-Yg2wQr-_rsjwYHLa5DMtfNQ/s751/18.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4GGO7No69l3qPgvMUBRO12X3VXJuV_n0SziEHqE0TAr_JKVxqW3t9wi7A57xrz_60CFnqRa01gD5GpHCEpv4QATc7c5Kj_4JHBo17SHfTd01WJcq27cHMEAZsdxwmH8liWvZSUYP9kRQR5ZhKH2XzYNVPopxmAdBu45w656uFI_plOvFoGUix4LBPQw/s787/19.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqdFb7ZMJLitMQNi_cOFU755lXRpFpFU22AguYlryQoC1T1UWwpMO6vHKlFPyrEDYM5KQrbWYOHG7q-BjNzQIPOXw-_pmdlU1_UMRi6yEp6lGvTbe6RDvaXoZ-miapFuDIRZo2lZX7-dQjHYla-JIujAWarA4pnuq6qkTUDrUf6lkPs4D9El4_33rT8w/s736/2.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUKf11nkKoS4I24yA2eSxA4R7bzM8xKgpeVzEwCmYAwuMUzbDogsTHuT2gfz-MryjtLNJM31zu5ozQW3fgTkVbWcXtX3gJbEf5aQBHpsLhR3BrOJHYVrGKO1qhpOB2DlL8ReJGQKvHO7ZVGph7JzGOfcp9nnLv3SEOQA9Swx7HptzOb9xoCwwKXG606w/s1778/3.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-kKfNiv9DzY6X3XsZ-epclE98guR5o-Nnrj1NmNEDMHDJ5bJfOQS4IqlK1Uw7HGrgchWvVgpMNuy3JqS3v9TqjBzLNMw-9jGBh4GDj1Zpt7H54JeXWlBa9uVMe4fAoLKiWQIvCWEjZYf0-ga8956nNSAiCgIPNqsFogDhYZk72vqlmPlhbfNuPchNoQ/s679/4.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXUUijpq07j6kfO9t8G23ilezsYkdsDO6B7aVesPPuj8yzmgGCaUe8RamJ9fTi0DHIGlrIg2icNMgG8wEw4lgYLf0bw754xuASOpQ4UZoTrZX6aR8W0BkZzc0bugzMIlCMnQQABXFLtwFbgj4pt3r2dmglwCDRZT4h1B4ROjKBJtoMOzEHBxPNWCqORw/s790/5.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzldzadz6j4Se11vvarZeh9wZkmvmaebuXK4W7idLwa1CmpWfnYSKG780N_s5nA4ypnNrzWQErFGw7gdcPDJvstYA1SPWVEnCmR9bFtFWCSrwGlPHdXqfHupkgVDFCmU507ZxFYO5L9LI6Qmll9YGxKS7UBt5P5eUB_h3fU934kIP1YQTBB5dkX6Iqrg/s613/6.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjREL1NN-Z4Ih_VHFN5BRACrHmLQwYlQDZhIK7NuBqT8SvL27epWru2b_4fCf9P62l3Ua5a5apUa9Xk66R7b2JibiYatv1V-aIW4vVuOrZHrZxWGan24Sjz1hJmijFbEFonK6qQGzn25EuJX9eBq40rSz3WAGnMVsDYkwjy39KwZqMZQSL2jk-0oUXlpg/s675/7.png

blogger.googleusercontent.com

https://www.youtube.com/watch?v=L8Ya7fBgEzU&ab_channel=BillyEllis

youtube.com

https://www.youtube.com/watch?v=TfJrU95q1J4&ab_channel=LiveOverflow

youtube.com

https://github.com/radareorg/radare2

github.com

https://azeria-labs.com/grooming-the-ios-kernel-heap/

azeria-labs.com

https://azeria-labs.com/heap-overflows-and-the-ios-kernel-heap/

azeria-labs.com

https://highaltitudehacks.com/2020/09/06/arm64-reversing-and-exploitation-part-2-use-after-free/

highaltitudehacks.com