+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Auxiliary (https://hackforums.net/forumdisplay.php?fid=453)
+---- Forum: Buyers Bay (https://hackforums.net/forumdisplay.php?fid=44)
+---- Thread: PoC Reverse Engineering and Software Architecture Services (/showthread.php?tid=6160207)
PoC Reverse Engineering and Software Architecture Services - 7psy - Jun 23, 2021
Hey all,
Is there anyone who can share their experiences with proof-of-concept reverse/malware engineering, 0day development and /or software architecture and implementation design services ? I heard of iYSRED that is a top-notch research laboratory providing lots of resources among the services/solutions provided on their page. Let's do some brainstorming here ! 🤩
[contract=tid]Start Contract[/contract]
RE: PoC Reverse Engineering and Software Architecture Services - x_x - Jun 23, 2021
I made a POC iOS ransomware for jailbroken users, stops them from unlocking the device, locks all files, if they attempt to reboot then the /var/ gets deleted. No c2 as it was just POC so I didn't add a way to buy a decryption key.
RE: PoC Reverse Engineering and Software Architecture Services - 7psy - Jun 23, 2021
(Jun 23, 2021 09:50 AM)Yatzz Wrote: I made a POC iOS ransomware for jailbroken users, stops them from unlocking the device, locks all files, if they attempt to reboot then the /var/ gets deleted. No c2 as it was just POC so I didn't add a way to buy a decryption key.
Have you tried accessing local user hash table to further bruteforce for privilege escalation scenarios ?
RE: PoC Reverse Engineering and Software Architecture Services - x_x - Jun 23, 2021
(Jun 23, 2021 05:43 PM)7psy Wrote: Have you tried accessing local user hash table to further bruteforce for privilege escalation scenarios ?
It already has root permissions as soon as it is executed due to "filza" (the file manager for jailbroken devices) installing every .deb (debian) as root which is kinda a huge oversight.
RE: PoC Reverse Engineering and Software Architecture Services - 7psy - Jun 25, 2021
(Jun 23, 2021 11:21 PM)Yatzz Wrote: It already has root permissions as soon as it is executed due to "filza" (the file manager for jailbroken devices) installing every .deb (debian) as root which is kinda a huge oversight.
Interesting. I thought cross compiling would be possible. On the other hand I was mentioning about a hypothetical device that was not jailbroken thus a local day might escalate to root access. From my perspective execution can occur if file manager is something else as well. Also there might be relation the emmc driver circuit and firmware too.
RE: PoC Reverse Engineering and Software Architecture Services - x_x - Jun 25, 2021
(Jun 25, 2021 12:24 PM)7psy Wrote: Interesting. I thought cross compiling would be possible. On the other hand I was mentioning about a hypothetical device that was not jailbroken thus a local day might escalate to root access. From my perspective execution can occur if file manager is something else as well. Also there might be relation the emmc driver circuit and firmware too.
The post probable way is by iOS webkit, there is a public ios 9.3.3 webkit exploit to shell from a link
RE: PoC Reverse Engineering and Software Architecture Services - 7psy - Jun 26, 2021
(Jun 25, 2021 12:33 PM)Yatzz Wrote: The post probable way is by iOS webkit, there is a public ios 9.3.3 webkit exploit to shell from a link
Dunno abbott the sploit but there sure exists a vector through the transport layer as well. If you don't have x permission over shell webkit makes no sense already. Why don't you focus on new architectures, I mean 9 is way toooo old and has no use at all. There are rumors floating around on various vehicle control and entertainment softwares, there is plenty of money in that bussines, if you know how to code C or Assembly 🤣