alephsecurity / xnu-qemu-arm64

Other
1.37k stars 123 forks source link

Add ability to execute code arbitrary kernel code on the guest machine without patching the kernel #2

Closed jonyafek closed 4 years ago

jonyafek commented 4 years ago

Description

We want to have a simple framework to compile and execute arbitrary kernel code on the guest iOS machine. We want to have this without patching the kernel using a gdb script that will create fake task ports for our process. This will enable us to send messages to the kernel task port and therefore execute arbitrary kernel memory.

Compilation should be performed easily with a symbols file as input to link the function calls and global variables to their relevant locations.

V3rochka commented 4 years ago

Implemented by @jonyafek . Kernel was patched.