A small improvement to OS X “rootkitery”: bruteforcing sysent discovery, fast & easy!

I love to read about the Human brain and yesterday I was feeling weird about this thing. As far as I know, everyone (publicly) was trying to search sysent in one way or another after Apple removed the sysent symbols but not bruteforcing it. It seems no…

I love to read about the Human brain and yesterday I was feeling weird about this thing. As far as I know, everyone (publicly) was trying to search sysent in one way or another after Apple removed the sysent symbols but not bruteforcing it. It seems no one bothered to question the original method (Landon Fuller?) and just kept using it. Are there any historical reasons for this? I can’t remember any.


Print Share Comment Cite Upload Translate
APA
() » A small improvement to OS X “rootkitery”: bruteforcing sysent discovery, fast & easy!. Retrieved from https://www.truth.cx/2012/02/14/a-small-improvement-to-os-x-rootkitery-bruteforcing-sysent-discovery-fast-easy/.
MLA
" » A small improvement to OS X “rootkitery”: bruteforcing sysent discovery, fast & easy!." - , https://www.truth.cx/2012/02/14/a-small-improvement-to-os-x-rootkitery-bruteforcing-sysent-discovery-fast-easy/
HARVARD
» A small improvement to OS X “rootkitery”: bruteforcing sysent discovery, fast & easy!., viewed ,
VANCOUVER
- » A small improvement to OS X “rootkitery”: bruteforcing sysent discovery, fast & easy!. [Internet]. [Accessed ]. Available from: https://www.truth.cx/2012/02/14/a-small-improvement-to-os-x-rootkitery-bruteforcing-sysent-discovery-fast-easy/
CHICAGO
" » A small improvement to OS X “rootkitery”: bruteforcing sysent discovery, fast & easy!." - Accessed . https://www.truth.cx/2012/02/14/a-small-improvement-to-os-x-rootkitery-bruteforcing-sysent-discovery-fast-easy/
IEEE
" » A small improvement to OS X “rootkitery”: bruteforcing sysent discovery, fast & easy!." [Online]. Available: https://www.truth.cx/2012/02/14/a-small-improvement-to-os-x-rootkitery-bruteforcing-sysent-discovery-fast-easy/. [Accessed: ]
Select a language: