https://blog.omiilgo.com/tags/ios/ Recent content in Ios on Security Notes Hugo en-us Fri, 21 Mar 2025 13:00:00 +0800 https://blog.omiilgo.com/posts/ios-swift-vs-objc-name-recovery/ Fri, 21 Mar 2025 13:00:00 +0800 https://blog.omiilgo.com/posts/ios-swift-vs-objc-name-recovery/ Lab Swift class LabVault: $s… mangled names, xcrun swift demangle, nm before/after strip, the one @objc method that survives in __objc_methname. class-dump, lldb, ASAN. cryptid=1 stops the lab. https://blog.omiilgo.com/posts/ios-dyld-shared-cache-symbolication/ Mon, 19 Aug 2024 15:00:00 +0800 https://blog.omiilgo.com/posts/ios-dyld-shared-cache-symbolication/ Lab crash on a self-signed LabSession: dwarfdump -u, atos against the dSYM, why UIKit frames are not in nm of the app, crash report with [REDACTED] paths. No DSC extraction. cryptid=1 stops the lab. https://blog.omiilgo.com/posts/ios-entitlements-and-sandbox/ Thu, 06 Apr 2023 10:00:00 +0800 https://blog.omiilgo.com/posts/ios-entitlements-and-sandbox/ codesign -d –entitlements on a self-signed LabSession: get-task-allow, redacted application-identifier, container paths on the simulator, sandbox-exec, deny logs when a file read walks outside the container. cryptid=1 stops the lab. https://blog.omiilgo.com/posts/ios-objc-msgsend-reversing/ Wed, 27 Oct 2021 16:40:00 +0800 https://blog.omiilgo.com/posts/ios-objc-msgsend-reversing/ otool load commands, class-dump selectors, lldb break on objc_msgSend, recover IMP for -[LabSession startWithToken:], redacted argument log. FairPlay-encrypted App Store bins are out of scope. https://blog.omiilgo.com/posts/ios-macho-load-commands-lab/ Thu, 16 Jan 2020 11:00:00 +0800 https://blog.omiilgo.com/posts/ios-macho-load-commands-lab/ Full otool -l walk of a self-signed LabSession: mach_header_64, LC_SEGMENT_64 __TEXT/__DATA, LC_LOAD_DYLIB, LC_CODE_SIGNATURE, LC_ENCRYPTION_INFO_64 cryptid=0. size -x, nm, class-dump, lldb. cryptid=1 stops the lab.