https://blackwinghq.com/tags/reverse-engineering/Blackwing Intelligence provides high-end security engineering, analysis, and research services for engineering focused organizationsenTue, 02 Jan 2024 00:00:00 +0000https://blackwinghq.com/blog/posts/playing-with-libmalloc/Tue, 02 Jan 2024 00:00:00 +0000https://blackwinghq.com/blog/posts/playing-with-libmalloc/An introduction to macOS libmalloc in 2024 and heapster, a new tool for exploring the heap, plus a few strange things found along the way.https://blackwinghq.com/blog/posts/a-touch-of-pwn-part-i/Tue, 21 Nov 2023 00:00:00 +0000https://blackwinghq.com/blog/posts/a-touch-of-pwn-part-i/How we bypassed Windows Hello fingerprint authentication on three laptops: reverse engineering the sensors, breaking a custom TLS, and defeating Microsoft's SDCP protocol.https://blackwinghq.com/research/tools/iboot64binja/Thu, 01 Oct 2020 00:00:00 +0000https://blackwinghq.com/research/tools/iboot64binja/A Binary Ninja binary view for iBoot, SecureROM and similar Apple boot firmware. Point it at a raw image and it identifies the firmware, finds the load address and rebases the binary so analysis is accurate, then restores a set of useful symbols from heuristics, so you start from a mapped, partly labelled image instead of a blob at address zero. Inspired by argp’s iBoot64helper loader for IDA Pro.