Improving the ASLR of Mac OS X Snow Leopard

Last week I presented my research about “Adding ASLR to jailbroken iPhones” at the Power of Community 2010 (POC2010) security conference in Seoul. During my talk I explained how one can use a modified ‘rebase’ utility to rebase the dynamic linker dyld on the iPhone. Rebasing dyld is important because it contains enough code gadgets that can be used to kickstart arbitrary shellcode on jailbroken iPhones. A tool called Antid0te will be released until the end of this year that allows normal users to add ASLR to their iPhones. The release of this tool was originally planned for 24th December 2010 but it had to be postponed because I got really ill and also my glasses broke.

Anyway a few days ago I demonstrated how my “rebase dyld” research that was originally done for the iPhone applies directly to the dynamic linker used by Mac OS X Snow Leopard. I released a short article describing how one can rebase his dyld binary with a patched ‘rebase’ utility which I also released. This can be used to rebase your own dyld binary to a different position. Rebasing dyld to an address other than the normal one, improves the security of your Mac because all the public articles/techniques about state of the art Mac OS X exploitation assume/require the dyld binary to be loaded at a fixed address. All attacks based on this will fail once you have rebased your dynamic linker binary.

So enjoy this little christmas present until I am fit enough to release antid0te.

Both comments and pings are currently closed.

72 Responses to “Improving the ASLR of Mac OS X Snow Leopard”

  1. domenica jet set roma…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  2. kids art activities…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  3. boston computer support…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  4. cheap dining room sets…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  5. lawn grass says:

    lawn grass…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  6. jazz radio says:

    jazz radio…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  7. landscape supplies…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  8. traditional wedding cake toppers…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  9. camping tent says:

    camping tent…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  10. Maschinenfick…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  11. baby einstein…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  12. garden fencing…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  13. Buy Gold says:

    Buy Gold…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  14. How To Buy Gold…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  15. search engine marketing service…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  16. tropical landscape…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  17. yipit clone says:

    yipit clone…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  18. [...] CYPRESS SEMICONDUCTOR ACCENTURE ACER ADOBE SYSTEMS ADVANCED SEMICONDUCTOR ENGINEERING ALLIANCE DATA SYSTEMS Posted by admin at [...]

  19. [...] INSTRUMENTS TERADATA TELETECH HOLDINGS TECHNITROL TAKETWO INTERACTIVE SOFTWARE SYNTEL SYNTAXBRILLIAN This entry was posted in [...]

  20. seo danışmanı…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  21. download movies to pc…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  22. Kindle DX South Africa…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  23. jewish dating…

    As a Newbie, I am permanently exploring online for articles that can benefit me. Thank you…

  24. sopa and pipa…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  25. Rhymi3 says:

    Snappoin3…

    Great blog post, saw on…

  26. check24 says:

    check24…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  27. rocket stove plans…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  28. lds dating sites…

    Hey very nice web site!! Man .. Excellent .. Amazing .. I will bookmark your web site and take the feeds also๏ฟฝI am happy to find numerous useful information here in the post, we need work out more techniques in this regard, thanks for sharing. . . . …

  29. HDI says:

    HDI…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  30. Fossil Uhren says:

    Fossil Uhren…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  31. e cigarette reviews…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  32. affordable SEO service…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  33. create a blog…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  34. apply for payday loan…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  35. shrimp farming…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  36. Ryan Karben,law office new york,lawyer NY,lawyer New York,law office new york city,law office new york jobs,law office new york ny,law office new york state,law office new york website,law office new york llc,law office new york manhattan,llc law off…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  37. Javascript swiping…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  38. free movies online…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  39. Cheap Adsense Site Creation…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  40. SBI Personal Loans…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  41. Recover HYIP Investment…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  42. fun videos says:

    fun videos…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  43. Professional Cake Decorating…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  44. Kindle Wi-Fi says:

    Kindle Wi-Fi…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  45. stupid videos…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  46. Happy…

    Am glad that I found this – thanks….

  47. Splendid…

    I totally applauded this story!…

  48. Gems form the internet…

    [...]very few websites that happen to be detailed below, from our point of view are undoubtedly well worth checking out[...]……

  49. Home Insurance Rates…

    [...]Improving the ASLR of Mac OS X Snow Leopard | PHP Blog[...]…

  50. Bing results…

    While searching quite a lot Bing and AOL I very much happily found this interesting page in the search results and I did think it would match…