Mac Hacking Class and presentation at BH USA

Hey,

so a bit of advertisement for me.

I will do a training at Black Hat USA on Mac OS X hacking, I'm really looking forward to having you as students!

Register yourself here

The class will explain how to assess the security of Mac OS X from the ground up, including how to deal with heap and stack exploitation, Objective-C reversing, Mach API abusing, advanced payload writing and differences between iPhone and OSX exploitation.

Anyway if for whatever reason you can't attend my class(and in that case I'll be very sad), I'll speak with Charlie Miller at the Briefings. Here's the abstract

Snagg

iPhone, Mobile Security and Osx

Hey guys,

so back with some updates on my research. First of all I gave a talk with Charlie Miller on iPhone and OSX payloads at Black Hat Europe.
Here are a few links:

• White paper
• Video

The slides will be available soon.

In May I'm going to join Jeff Moss and a bunch of really cool people in the next Black Hat webcast: Mobility and Security. I hope all of you will register and join the round table.

One last appointment, if anyone wants to meet, I'll be speaking at EuSecWest in London at the end of May.

Snagg

Let your Mach-o fly round-up

Hey all,

this is my first blog post for Nibblesec. So I decided to start from what I did in the last couple of months.

I was mainly involved in some research on OS X. Specifically a way to create a userland execve() on Mac OS X.

So if you are interested in it, here are a few links that might help you:

White paper

Slides

Poc code

And finally a nice video I made on my technique and Safari.

I'll be speaking with Charlie Miller about In-memory attacks at Black Hat Europe 2009. I'm looking forward to meeting you there.

Snagg