Reverse Engineering Mac OS X

Links

• Blogs

  • A Stick Figure Guide to the Advanced Encryption Standard (AES)
  • Kris Kasperky Blog
  • Tech & Sec
  • TippingPoint Digital Vaccine Laboratories Blog

• DTrace

  • Exploring Leopard with DTrace

• Ebook Warez

  • Avaxhome.ws
  • Dbebooks.biz
  • Ebookshare.net
  • Knowfree.net
  • Netbks.com

• Forensics Tools and Documentation

  • DC3 Digital Forensincs Challenge
  • Digital Forensics Research Conference (Forensic Challenges)
  • FLAG (Forensic and Log Analysis GUI)
  • Forensics Wiki
  • Scalpel: A Frugal, High Performance File Carver

• Hardware

  • Faqintosh Mac Hardware Guides

• Linux Reversing

  • Linux anti-debugging techniques (fooling the debugger) – Silvio Cesare
  • List and links of debug tools for Linux/Unix

• Mac OS Literature

  • Mac OS X Internals Book
  • Rixstep

• Mac Reversing

  • 0xFE – How OS X Executes Applications
  • Apple Technical Note TN2124 – Mac OS X Debugging Magic
  • debugging itunes with gdb (ptrace deny trick explanation)
  • Hello Debugger: Debugging a Device Driver With GDB
  • Introduction to Network Kernel Extensions Programming Guide
  • Mac OS X ABI Mach-O File Format Reference
  • Primer on Reversing Jailbroken iPhone Native Applications v1.0
  • Technical Note TN2127 – Kernel Authorization (KAuth)
  • Technical Note TN2206 – Mac OS X Code Signing In Depth
  • Technical Q&A QA1361 – Detecting the Debugger
  • When Things Go Wrong: Debugging the Kernel

• Mac Reversing Utilities

  • Class Dump
  • FSEventer
  • RE:Trace and REDBG

• Mac Reversing Websites

  • KellogS’ OS X RevEng Log
  • Mac OS X – It’s the new black – Ghalen
  • nemo

• Reversing Websites

  • ARTeam – Reverse Engineering
  • How to code debuggers
  • Reddit.com links to Reverse Engineering Material
  • Reversing Labs
  • The Reverse Code Engineering Community
  • Woodmann RCE board

• Unix Reversing Utilities

  • radare is a Free advanced command line hexadecimal editor

• Windows Reversing

  • Arab Team 4 Reverse Engineering
  • CrackZ’s Reverse Engineering Page

• Windows Reversing Utilities

  • DarunGrim: A Binary Diffing Tool
  • PatchDiff2 – A patch analysis plugin for IDA

• x86 Asm

  • Intel x86 JUMP quick reference
  • Intel® 64 and IA-32 Architectures Software Developer’s Manuals
  • The Art of Picking Intel Registers
  • Understanding Intel Instruction Sizes
  • x86 Opcode and Instruction Reference