Skip to content

Issues: malus-security/ioracle

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

26 Open 4 Closed
26 Open 4 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Try using lsof or levin's lsof functionality in his procexp tool.
#30 opened Jun 19, 2017 by alecdeshotels
backtracer sometimes needs information about policies or context that could be provided by iOracle.
#29 opened Jun 19, 2017 by alecdeshotels
Should we just run backtracer on every function and for r0-r3? Then we could just query for the functions we care about.
#28 opened Jun 19, 2017 by alecdeshotels
The ----; in ida doesn't necessarily mean there are 2 parent basic blocks.
#27 opened Jun 19, 2017 by alecdeshotels
query to find sandbox profiles that allow a process to grant itself arbitrary sandbox extensions and access any file. quicklookd and afcd can do this.
#26 opened May 25, 2017 by alecdeshotels
Briefly discuss access control enforcement in the background section, but keep the emphasis on policy analysis.
#25 opened May 25, 2017 by alecdeshotels
When debugserver launches neagent, does neagent use debugserver's sandbox?
#24 opened May 23, 2017 by alecdeshotels
Write Evaluation
#23 opened May 23, 2017 by alecdeshotels
Produce Small Step Semantics for Prolog Rule explanation.
#22 opened May 23, 2017 by alecdeshotels
3
We claim that no root process is sandboxed. Is this true? Make queries.
#21 opened May 23, 2017 by alecdeshotels
determine which jailbreaks could have been fixed with changes to the sandbox and explain why.
#18 opened May 23, 2017 by alecdeshotels
Further testing of iOS 9 exploit where third party app puts symlink in com.apple.itunes.lock_sync and then afcd makes link to this link. This bypasses restrictions that should stop afcd from making links to places out of Media/
#17 opened May 23, 2017 by alecdeshotels
How did the attackers push files to the tmp directory after afcd set up a link to it?
#16 opened May 23, 2017 by alecdeshotels
run further tests to confirm that symlink attack works for afcd extension redirection and find similar situations.
#13 opened May 23, 2017 by alecdeshotels
What if a file is created during dynamic analysis, and we don't have the metadata for the file from static analysis?
#12 opened May 23, 2017 by alecdeshotels
Investigate warnings appearing when rules are imported
#11 opened May 23, 2017 by alecdeshotels
extract services and convert to facts
#10 opened May 23, 2017 by alecdeshotels
1
understand difference between global-name and local-name filters in mach service sandbox rules
#9 opened May 23, 2017 by alecdeshotels
2
Design and list exact actions performed during dynamic analysis (backup, reboot, take photo, etc.)
#8 opened May 23, 2017 by alecdeshotels
1
Posix ACLs
#7 opened May 23, 2017 by alecdeshotels
Directory Stick Bit
#6 opened May 23, 2017 by alecdeshotels
Distinguish TTY and character device
#5 opened May 23, 2017 by alecdeshotels
1
Distinguish HOME and FRONT_USER_HOME prefix variables
#4 opened May 23, 2017 by alecdeshotels
1
Determine if default allow profiles are relevant, and if so, model them.
#3 opened May 23, 2017 by alecdeshotels
1
Design prolog rules to find common solution of two regular expressions. wontfix
#2 opened May 23, 2017 by alecdeshotels
2
ProTip! no:milestone will show everything without a milestone.