Wow, PESSR has Eroded Apple in Blink - Fun and Profit to Gain Dozens of iOS Vulnerabilities in Minutes by (P)ortable (E)xtensible (S)criptable (S)eed (R)eproducible Mobile Fuzzer

No ratings

Presented at CODEBLUE2018@TOKYO 2018 by

Ju Zhu

Moony Wu

As we all know, Apple has been enforcing security protection on its operation system (e.g. MacOS, iOS) especially for iOS system in both technical method (e.g. sandboxed application, code sign checks at run time) on devices and application security check (e.g. DRM for application, AppleID management) in policy on Apple Store.This would not be good news for security (e.g. vulnerability hunting and malware sourcing) researcher for Apple System because we could not gain sufficient privilege easily and control the system in flexible just like "dancing with shackles".In this session, we would like to propose and open source PESSR mobile fuzzer which would facilitate the bug hunting activity from view of portable (supporting mobile and PC), extensible(both user mode and kernel mode), reproducible(seed based) and pluggable(based on script). This kind of fuzzing method is verified on Mac/iOS system (which could allow you gain dozens of reproducible XPC services daemon crashes in minutes or seconds).We expect this research could be evolved to general bug hunting infrastructure to reduce unnecessary effort while focusing on finding new attack interface for security researchers.