├── .DS_Store ├── Objective-C Pwn and iOS arm32 ROP ├── Makefile ├── hello.m ├── hello2.m ├── hello3.m ├── jtool ├── talker.h └── talker.m ├── README.md ├── doc ├── Objective-C Pwn and iOS arm32 ROP.md └── 利用XPC过App沙盒.md └── iOS XPC Privilege Escalation ├── .DS_Store └── ice_and_fire ├── .DS_Store ├── ice_and_fire.xcodeproj ├── project.pbxproj ├── project.xcworkspace │ ├── contents.xcworkspacedata │ └── xcuserdata │ │ ├── monkey.xcuserdatad │ │ └── UserInterfaceState.xcuserstate │ │ └── netease.xcuserdatad │ │ └── UserInterfaceState.xcuserstate └── xcuserdata │ ├── monkey.xcuserdatad │ └── xcschemes │ │ ├── ice_and_fire.xcscheme │ │ └── xcschememanagement.plist │ └── netease.xcuserdatad │ ├── xcdebugger │ └── Breakpoints_v2.xcbkptlist │ └── xcschemes │ ├── ice_and_fire.xcscheme │ └── xcschememanagement.plist ├── ice_and_fire ├── .DS_Store ├── AppDelegate.h ├── AppDelegate.m ├── Assets.xcassets │ └── AppIcon.appiconset │ │ └── Contents.json ├── Base.lproj │ ├── LaunchScreen.storyboard │ └── Main.storyboard ├── Info.plist ├── ViewController.h ├── ViewController.m ├── base.h ├── connection.h ├── debug.h ├── endpoint.h ├── main.m └── xpc.h └── ice_and_fireUITests ├── Info.plist └── ice_and_fireUITests.m /.DS_Store: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/.DS_Store -------------------------------------------------------------------------------- /Objective-C Pwn and iOS arm32 ROP/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/Objective-C Pwn and iOS arm32 ROP/Makefile -------------------------------------------------------------------------------- /Objective-C Pwn and iOS arm32 ROP/hello.m: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/Objective-C Pwn and iOS arm32 ROP/hello.m -------------------------------------------------------------------------------- /Objective-C Pwn and iOS arm32 ROP/hello2.m: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/Objective-C Pwn and iOS arm32 ROP/hello2.m -------------------------------------------------------------------------------- /Objective-C Pwn and iOS arm32 ROP/hello3.m: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/Objective-C Pwn and iOS arm32 ROP/hello3.m -------------------------------------------------------------------------------- /Objective-C Pwn and iOS arm32 ROP/jtool: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/Objective-C Pwn and iOS arm32 ROP/jtool -------------------------------------------------------------------------------- /Objective-C Pwn and iOS arm32 ROP/talker.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/Objective-C Pwn and iOS arm32 ROP/talker.h -------------------------------------------------------------------------------- /Objective-C Pwn and iOS arm32 ROP/talker.m: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/Objective-C Pwn and iOS arm32 ROP/talker.m -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # ios-security 2 | iOS ROP以及逃逸沙盒的简单实践 3 | 4 | -------------------------------------------------------------------------------- /doc/Objective-C Pwn and iOS arm32 ROP.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/doc/Objective-C Pwn and iOS arm32 ROP.md -------------------------------------------------------------------------------- /doc/利用XPC过App沙盒.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/doc/利用XPC过App沙盒.md -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/.DS_Store: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/.DS_Store -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/.DS_Store: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/.DS_Store -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire.xcodeproj/project.pbxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire.xcodeproj/project.pbxproj -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire.xcodeproj/project.xcworkspace/contents.xcworkspacedata: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire.xcodeproj/project.xcworkspace/contents.xcworkspacedata -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire.xcodeproj/project.xcworkspace/xcuserdata/monkey.xcuserdatad/UserInterfaceState.xcuserstate: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire.xcodeproj/project.xcworkspace/xcuserdata/monkey.xcuserdatad/UserInterfaceState.xcuserstate -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire.xcodeproj/project.xcworkspace/xcuserdata/netease.xcuserdatad/UserInterfaceState.xcuserstate: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire.xcodeproj/project.xcworkspace/xcuserdata/netease.xcuserdatad/UserInterfaceState.xcuserstate -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire.xcodeproj/xcuserdata/monkey.xcuserdatad/xcschemes/ice_and_fire.xcscheme: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire.xcodeproj/xcuserdata/monkey.xcuserdatad/xcschemes/ice_and_fire.xcscheme -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire.xcodeproj/xcuserdata/monkey.xcuserdatad/xcschemes/xcschememanagement.plist: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire.xcodeproj/xcuserdata/monkey.xcuserdatad/xcschemes/xcschememanagement.plist -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire.xcodeproj/xcuserdata/netease.xcuserdatad/xcdebugger/Breakpoints_v2.xcbkptlist: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire.xcodeproj/xcuserdata/netease.xcuserdatad/xcdebugger/Breakpoints_v2.xcbkptlist -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire.xcodeproj/xcuserdata/netease.xcuserdatad/xcschemes/ice_and_fire.xcscheme: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire.xcodeproj/xcuserdata/netease.xcuserdatad/xcschemes/ice_and_fire.xcscheme -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire.xcodeproj/xcuserdata/netease.xcuserdatad/xcschemes/xcschememanagement.plist: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire.xcodeproj/xcuserdata/netease.xcuserdatad/xcschemes/xcschememanagement.plist -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/.DS_Store: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/.DS_Store -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/AppDelegate.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/AppDelegate.h -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/AppDelegate.m: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/AppDelegate.m -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/Assets.xcassets/AppIcon.appiconset/Contents.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/Assets.xcassets/AppIcon.appiconset/Contents.json -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/Base.lproj/LaunchScreen.storyboard: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/Base.lproj/LaunchScreen.storyboard -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/Base.lproj/Main.storyboard: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/Base.lproj/Main.storyboard -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/Info.plist: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/Info.plist -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/ViewController.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/ViewController.h -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/ViewController.m: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/ViewController.m -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/base.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/base.h -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/connection.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/connection.h -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/debug.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/debug.h -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/endpoint.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/endpoint.h -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/main.m: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/main.m -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/xpc.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fire/xpc.h -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fireUITests/Info.plist: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fireUITests/Info.plist -------------------------------------------------------------------------------- /iOS XPC Privilege Escalation/ice_and_fire/ice_and_fireUITests/ice_and_fireUITests.m: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AloneMonkey/ios-security/HEAD/iOS XPC Privilege Escalation/ice_and_fire/ice_and_fireUITests/ice_and_fireUITests.m --------------------------------------------------------------------------------