Corellium Class: Intro to iOS Kernel
Tools for Vulnerability Researchers

This course provides an overview of using the Corellium Virtual Hardware platform with Apple iOS virtual devices. Students will get first-hand experience with common tactics and techniques for discovering vulnerabilities and investigating exploits.

Download the Syllabus
Who is this for?

Who is this for?

Who is this for?
The target audience for this course is security and malware researchers, mobile cybersecurity and privacy experts. Prerequisites for the course include…
  • Familiarity with Corellium (e.g. see Corellium QuickStart course)
  • Familiarity with UNIX-derivatives (e.g. Linux, macOS, BSD)
  • Some understanding of C and Arm64 assembly
  • IDA Pro with Arm64 support (Hex-Rays recommended) or Binary Ninja

Course Content

Covers the basics of using lldb with Corellium

  • Basic Commands
  • Python Scripting
  • Monitor commands
  • Debugging the kernel entry point
  • iBoot debugging

    • Covers the available hypercalls:

  • Kernel breakpoints from userspace
  • Console logging
  • Manipulating kernel memory
  • Obtaining kernel/system information
  • Hook language
  • Use case 1: Profiling the allocator
  • Use case 2: Disabling mitigations
  • Use case 3: Logging file opens

    • Covers capturing kernel flow from running /bin/ls and importing coverage into Lighthouse

  • What is program flow?
  • How does this relate to code coverage?
  • How does it work?
  • Preparing to capture flow data: Running btgen/btasm
  • Capturing data: Running hyptrace
  • Converting data to human-readable file: Running btrace
  • Examining the human-readable trace
  • Importing into Lighthouse
  • Concept: Integration into other tools
  • SEP overview (purpose, architecture, etc)
  • Firmware and encryption
  • Example debugging session
  • Connecting to charmd

    • Courseware Pricing

    Choose between virtual or on-site training solutions.



    Virtual

    Course

    $5,000

    • 1/2 Day
    • Unlimited Attendees

    On-Site

    Course

    $15,000

    • Full Day
    • Unlimited Attendees
    • Hands-on Lab

    Contact Us to schedule

    Interested in scheduling a course? Let us know.