Finding the Entrypoint of iOS Apps in Ghidra

День тому

In this video we extract the components of an iOS application and learn how to find the entrypoint in Ghidra to start reverse engineering.
---
Timestamps:
00:00 Intro
00:33 Grabbing Sample
01:41 Don't Dump the whole thing!
02:29 Info.plist
03:40 Mach-O Binary
04:44 Ghidra Analysis
06:53 Entry Point
07:33 Finding Strings
07:49 Recap
---
Links Mentioned in Video:
Ghidra:
ghidra-sre.org/
---
Malware Examined in the video (goontact):
sha256:712e780afe2f0c4ccd0aa110d57c300d669bff4b5912ef9316b644a4ddbb6183
MalwareBazaar Link:
bazaar.abuse.ch/sample/712e78...
---
laurieWIRED Twitter:
/ lauriewired
laurieWIRED Website:
lauriewired.com
laurieWIRED Github:
github.com/LaurieWired
laurieWIRED HN:
news.ycombinator.com/user?id=...
laurieWIRED Reddit:
/ lauriewired

КОМЕНТАРІ: 17

@MrKaftpaket Місяць тому

This is exactly what I was looking for, thank you! Also, I love the style of your videos with the Desktop view, you in a window and the cute little corgi :D

@onlagency 10 місяців тому

Great video once again! You are one of the very few people that know how to make an entertaining, while informative tutorial. Thank you :)

@sourcandy69 9 місяців тому

I agree! Somehow better than almost all of the other tutorial people! (also extremely pretty but im here to do android stuff)

@beartrap9367 9 місяців тому

new sub here, thnx for the tutorial!

@doremi8889 6 місяців тому

I usually don't like to follow video tutorials, but the videos in this channel are enjoyable to watch, especially the rolling eyes, plus I found myself actually learned something. Thanks for taking time to make them, and please keep it up(subscribed and like-button-smashed)

@Me.n_n 10 місяців тому

Always Great content 👍❤, keep going ^^

@richardleandro8694 6 місяців тому

Awesome!! thank you for share !

@seattlefiorelli 10 місяців тому

So fun. Thank you!

@deadbeef2482 10 місяців тому

すごいです！

@TREXYT 10 місяців тому

Hi, with this way can we find fps value for all unreal engine games or unity games ? A new video with that would be cool

@joshg6126 9 місяців тому

Hello :) great video. Question, after opening the binary when I go to export it, I can’t get it back into a state in which the binary will run. Any ideas? Do I need to bundle it back into a macO?

@lauriewired 9 місяців тому

Yes, you need to repackage the binary into an IPA file and re-sign it with your own developer certificate for it to run on iOS (unless using a jailbroken device)

@joshg6126 9 місяців тому

@@lauriewired Thanks for the reply! Ah sorry I should have mentioned it’s a mac app. I’ll have a go at resigning anyway though. :)