Reverse Engineering iOS 18 Inactivity Reboot iOS 18 introduced a new inactivity reboot security feature. What does it protect from and how does... 2024-11-18 05:27:0 | 阅读: 11 | 收藏 | cat /dev/brain - naehrdine.blogspot.com inactivity firmware reverse iphones

Embedding Frida in iOS TestFlight Apps Learning reverse engineering on mobile devices can be challenging, especially on iOS, where tooling... 2023-2-16 01:8:0 | 阅读: 1 | 收藏 | cat /dev/brain - naehrdine.blogspot.com testflight gum payload graft libsystem

macOS Frida Setup macOS Frida SetupOn an M1 Mac, Frida needs some extra steps to be able to attach to system... 2022-11-21 03:51:0 | 阅读: 73 | 收藏 | cat /dev/brain - naehrdine.blogspot.com reversing security reverse aop macs

iPhone Setup for Reversing and Debugging There are a few configurations that I apply to almost every research iPhone. While these methods ar... 2022-5-11 17:56:0 | 阅读: 2 | 收藏 | cat /dev/brain - naehrdine.blogspot.com debugserver lldb developer xcode limits

Always-on Processor magic: How Find My works while iPhone is powered off Update: We wrote a paper with even more technical details :)iOS 15.0 introduces a new feature: an i... 2021-10-1 04:34:0 | 阅读: 1 | 收藏 | cat /dev/brain - naehrdine.blogspot.com bluetoothd lpm bluetool chip aop

Hunting Ghosts in Bluetooth Firmware: BrakTooth Meets Frankenstein There's a new Bluetooth vulnerability collection, called BrakTooth. PoCs are under NDA until end of... 2021-9-17 17:56:0 | 阅读: 5 | 收藏 | cat /dev/brain - naehrdine.blogspot.com lmp payload braktooth firmware memory

Bluetooth → Wi-Fi Code Execution & Wi-Fi Debugging If you ever looked into one of Broadcom's combo chip datasheets, you might have noticed a feature... 2021-4-24 19:15:0 | 阅读: 3 | 收藏 | cat /dev/brain - naehrdine.blogspot.com 000296 572 573 chip nexmon

BlueZ: Linux Bluetooth Stack Overview Found some time for another Bluetooth rant :) This time it's going to be about BlueZ, the Linux Blu... 2021-3-5 02:20:0 | 阅读: 2 | 收藏 | cat /dev/brain - naehrdine.blogspot.com bluez chip broadcom diagnostics lmp

InternalBlue: The perfect Bluetooth research device? The perfect Bluetooth research tooling doesn't exist ;) But since I'm maintaining InternalBlue I ca... 2021-2-7 19:27:0 | 阅读: 2 | 收藏 | cat /dev/brain - naehrdine.blogspot.com firmware chip broadcom cypress

Broadcom Bluetooth: Generating (not so?) random numbers When looking into the most recent Bluetooth patches of the Samsung Galaxy Note 20 5G, I found somet... 2021-1-31 03:22:0 | 阅读: 4 | 收藏 | cat /dev/brain - naehrdine.blogspot.com hrng prng samsung rng fallback

Broadcom Bluetooth: Unpatching the unpatchable Due to some vulnerabilities found recently, Broadcom started to see the "Bluetooth host -> Bluetoot... 2021-1-21 19:48:0 | 阅读: 1 | 收藏 | cat /dev/brain - naehrdine.blogspot.com patchram firmware 22238 hwcfg chip

Decent low-cost OBS setup A lot of people asked me about my OBS setup. So I'm releasing a few details here. Feel free to ask... 2021-1-1 03:32:0 | 阅读: 1 | 收藏 | cat /dev/brain - naehrdine.blogspot.com recording obs smartphone microphone noise

Your critical infrastructure bug won't be fixed and this is why Water, electricity, transportation—all of them are critical infrastructures. In Germany, everything... 2020-12-18 00:56:0 | 阅读: 3 | 收藏 | cat /dev/brain - naehrdine.blogspot.com terminals security gematik reporter foil

Supervising B.Sc./M.Sc. theses What to expect from supervising studentsSo far, I supervised approximately 30 B.Sc./M.Sc. student... 2020-7-25 21:6:0 | 阅读: 0 | 收藏 | cat /dev/brain - naehrdine.blogspot.com thesis supervising supervision supervisor phd