Record · corpus.blog/posts/01a087b8-13e4-70aa-b468-13e2b08162f8

Signature-based Analysis for Reversing

oliviagallucci.com · published 1 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at oliviagallucci.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 40
Words captured: 2,798

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

macOS Reversing: Bridging Source and Binary with Open Source as a Guide Read at the source ↗

oliviagallucci.com

https://developer.apple.com/documentation/iokit/1514515-ioserviceopen

developer.apple.com

https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/syslog.3.html

developer.apple.com

Reversing Apple’s syslogd bug Read at the source ↗

reverse.put.as

https://oliviagallucci.com/?post_type=post&p=75401

oliviagallucci.com

https://www.virusbulletin.com/uploads/pdf/magazine/2019/VB2019-Wu-Li.pdf

virusbulletin.com

https://en.wikipedia.org/wiki/Ioctl

en.wikipedia.org

https://archive.conference.hitb.org/hitbsecconf2019ams/sessions/fresh-apples-researching-new-attack-interfaces-on-ios-and-osx/

archive.conference.hitb.org

https://www.slideshare.net/slideshow/fun-and-games-with-mac-os-x-and-iphone-payloads-black-hat-europe-2009/2698716

slideshare.net

https://github.com/0x36/ghidra_kernelcache

github.com

https://github.com/0x36/ghidra_kernelcache?tab=readme-ov-file

github.com

https://github.com/0x36/ghidra_kernelcache/blob/master/load_sigatnures.py

github.com

https://github.com/bazad/ida_kernelcache

github.com

https://developer.apple.com/documentation/kernel/osmetaclass

developer.apple.com

https://blacktop.github.io/ipsw/blog/

blacktop.github.io

https://conference.hitb.org/hitbsecconf2019ams/materials/D1T2%20-%20Fresh%20Apples%20-%20Researching%20New%20Attack%20Interfaces%20on%20iOS%20and%20OSX%20-%20Moony%20Li%20&%20Lilang%20Wu.pdf

conference.hitb.org

https://docs.hex-rays.com/user-guide/signatures/flirt

docs.hex-rays.com

https://cra0.net/blog/posts/ida-plugin-for-function-signature-preservation/

cra0.net

https://theapplewiki.com/wiki/Kernel_Syscalls

theapplewiki.com

https://github.com/rewired-gh/macos-system-call-table/blob/main/arm64-system-calls.md

github.com

https://www.geeksforgeeks.org/operating-systems/remote-procedure-call-rpc-in-operating-system/

geeksforgeeks.org

https://www.fortinet.com/blog/threat-research/a-look-into-xpc-internals--reverse-engineering-the-xpc-objects

fortinet.com

https://dev.to/machkernel/baby-s-first-rust-with-extra-steps-xpc-launchd-and-ffi-4aeb

dev.to

https://www.synacktiv.com/publications/macos-xpc-exploitation-sandbox-share-case-study

synacktiv.com

https://www.seandeaton.com/gotta-re-em-all-reversing-c-virtual-function-tables-with-binary-ninja/

seandeaton.com

https://en.wikipedia.org/wiki/Dynamic_dispatch

en.wikipedia.org

https://stanislaw.github.io/2018-09-03-llvm-jit-objc-and-swift-knowledge-dump.html

stanislaw.github.io

https://github.com/gdbinit/MachOView

github.com

https://github.com/alliedmodders/sourcemod/blob/master/tools/ida_scripts/vtable_dump.py

github.com

https://medium.com/keylogged/python-class-informer-an-idapython-plugin-for-viewing-run-time-type-information-rtti-34aab101cd6c

medium.com

https://stackoverflow.com/questions/7141505/objective-c-preferred-way-to-retrieve-the-superclass-of-a-class-instance

stackoverflow.com

https://developer.apple.com/documentation/objectivec/class_getivarlayout(_:

developer.apple.com

https://docs.binary.ninja/guide/cpp.html

docs.binary.ninja

https://medium.com/%40edwardseverinsen171717/reverse-engineering-rtti-explained-e41b054552bf

medium.com

https://secfault-security.com/blog/chain3.html

secfault-security.com

https://www.guardsquare.com/blog/ios-app-security-introduction-objective-c-metadata-symbols-swift-objective-c-apps-part-1-2

guardsquare.com

Reverse Engineering iOS Apps - iOS 11 Edition (Part 2) Read at the source ↗

ivrodriguez.com

https://www.jeffhui.net/2014/03-reverse-engineering-objective-c.html

jeffhui.net

Binary Extraction with Visual Tooling Read at the source ↗

oliviagallucci.com

https://github.com/apple-oss-distributions

github.com