Difference between revisions of "Kernel"

From The iPhone Wiki
Jump to: navigation, search
m
Line 1: Line 1:
 
This is the Darwin kernel. Pre 2.0, it was vulnerable to the [[Ramdisk Hack]] and may still be, but iBoot doesn't allow boot-args to be passed anymore. It is mapped to memory at 0xC0000000. On startup, the [[kernelcache]] is decompressed and run.
 
This is the Darwin kernel. Pre 2.0, it was vulnerable to the [[Ramdisk Hack]] and may still be, but iBoot doesn't allow boot-args to be passed anymore. It is mapped to memory at 0xC0000000. On startup, the [[kernelcache]] is decompressed and run.
   
  +
== External Links ==
  +
[https://media.blackhat.com/bh-us-11/Esser/BH_US_11_Esser_Exploiting_The_iOS_Kernel_Slides.pdf Article by Stefan Esser about exploiting the kernel]
 
== See Also ==
 
== See Also ==
 
* [[Kernel Syscalls]]
 
* [[Kernel Syscalls]]

Revision as of 23:13, 3 September 2011

This is the Darwin kernel. Pre 2.0, it was vulnerable to the Ramdisk Hack and may still be, but iBoot doesn't allow boot-args to be passed anymore. It is mapped to memory at 0xC0000000. On startup, the kernelcache is decompressed and run.

External Links

Article by Stefan Esser about exploiting the kernel

See Also