Evad3rs to present at HITBSecConf2013 in Amsterdam

The evad3rs are probably one of the hottest tickets around right now on the mobile security circuit. The four hackers were able to overcome Apple’s highly regarded security systems in iOS 6, to provide us with the evasi0n jailbreak.

Well good news for those of you that will be in Amsterdam between the dates of April 8 – 11. The team will be giving a presentation at the Hack in the Box Security Conference in the country, at the Okura Hotel. More details after the fold…

That’s right, MuscleNerd, pod2g, planetbeing and pimskeks will all be on hand at HITBSecConf2013 to talk about their latest jailbreak, and how they managed to break through iOS 6’s security. Here’s a brief overview of their presentation.

“The Apple product security team did an impressive job raising the resilience of the iOS 6 kernel to well known attacks: Kernel ASLR was added, code pages of the kernel protected, and heap structures reinforced to harden the exploitability of heap overflows. Also, numerous directory traversals and vulnerabilities in iOS lockdown services have been fixed silently in the road from 5.1.1 to 6.0, burning all building blocks we already prepared.

For the iOS 6 public jailbreak, we started from scratch, and found successively a total of 8 vulnerabilities in a few months.

In our presentation, we will paint a big picture of the iOS 6 security, and how the Mandatory Code Signing requirement is enforced which is the target of all jailbreak tools. Afterwards, we will present different ideas, vulnerabilities and exploits that lead to the iOS 6 jailbreak. We will start by discussing the injection of the payload, which involves new and clever approaches to the problem, then explain how userland code is triggered, untethered, and finally discuss how the kernel has been successfully exploited.”