In this unique course targeting the internals of the iOS operating system, you'll get a chance to explore various exploit mitigations, IPC mechanisms, and XNU internals. Develop skills in reverse-engineering iOS specific security features and gain a deeper understanding of exploitation techniques, including both userland and kernel-level exploits. Follow each stage of the jailbreak process, supported by case studies of real-world exploits.
Target audienceThis course is specifically designed with the needs of modern iOS vulnerability researchers. This course will also be applicable for vulnerability researchers, penetration testers, mobile developers, or anyone keen to learn more about the iOS application security ecosystem.
|
|
Prerequisites |
To successfully participate in this course, attendees should possess the following:
Course content:
01 Course Preview
02 Welcome to the course
03 Setting up your Environment
04 iOS OS and Filesystem
05 ARM Assembly and Exploitation
06 Debugging Tools and Setup
07 Introduction to iOS Reverse Engineering
08 Mach-O Binary Format
09 iOS Kernel and ipsw Analysis
10 Code Signing Explained
11 Sandboxing in iOS
12 Analyzing Proprietary Security Mitigations
13 Memory Integrity Enforcement
14 iOS IPC
15 iOS Exploitation Concepts
16 Exploitation Case Studies
17 Jailbreaking Steps
18 Malware Analysis
19 Patch Diffing in iOS
20 CISR Mock Exam
21 Certified iOS Security Researcher (CISR) Exam
Certification
This course leads to the CISR (iOS Security Researcher) certification delivered by 8KSec. The exam is included in the course.
FAQ – Offensive iOS Internals (On-Demand)
How much does the course cost?
The course costs NOK 13,500 excluding VAT. Norwegian VAT of 25% applies, bringing the total price to NOK 16,875 including VAT. The Certified iOS Security Researcher (CISR) certification exam is included.
How is the course delivered?
The course is delivered as self-paced, on-demand e-learning through 8kSec Academy. Participants can access recorded lessons, practical exercises and self-assessments, allowing them to study according to their own schedule.
How long does the course take?
The course includes approximately 17 hours of video content across 104 videos. The estimated completion time is 3–5 months, depending on previous experience and study pace.
How long will I have access to the course?
Participants receive 365 days of access after purchase, allowing time to complete the lessons, work through practical exercises and prepare for certification.
Who should attend this course?
The course is designed for professionals interested in iOS operating system security, reverse engineering, vulnerability research and exploitation techniques.
What prerequisites are required?
Participants should have a working knowledge of cybersecurity and penetration testing fundamentals, basic familiarity with the iOS platform, Linux command-line skills and an understanding of programming concepts in Objective-C, Swift, C, C++ or a similar language.
Do I need experience with ARM64 assembly?
Basic knowledge of ARM or AARCH64 assembly and exploitation concepts is recommended but not required. The course introduces ARM64 architecture and includes practical exercises covering assembly, reverse engineering and exploitation fundamentals.
What will I learn during the course?
You will develop practical knowledge of iOS operating system internals, reverse engineering and vulnerability research. After completing the course, you will be able to:
Is the course hands-on?
Yes. The course includes practical exercises, reverse-engineering demonstrations, debugging labs, exploitation challenges and case studies involving real-world iOS security vulnerabilities.
Which topics are covered?
The course covers a range of iOS security research topics, including:
Does the course cover iOS kernel security?
Yes. The course explores XNU kernel internals, kernel caches, system calls, kernel symbolication, memory management and security mitigations. It also examines publicly documented kernel vulnerabilities and exploitation techniques.
Does the course cover reverse engineering?
Yes. Participants learn to analyse iOS applications, system binaries and kernel components using tools such as Ghidra, Hopper and radare2. The course also covers Mach-O formats and ARM64 assembly.
Does the course cover jailbreaking?
Yes. The course explores how iOS jailbreaks work, including relevant security mechanisms, privilege escalation concepts, code signing, trust caches and exploitation case studies.
Is this an iOS application penetration testing course?
Not primarily. Offensive iOS Internals focuses on operating system internals, vulnerability research and low-level exploitation. Participants interested specifically in assessing application-level security vulnerabilities may prefer Practical Mobile Application Exploitation.
Which tools are used during the course?
The training introduces tools and technologies including LLDB, Ghidra, Hopper, radare2 and utilities for IPSW analysis, binary extraction, kernel symbolication and debugging.
What equipment do I need?
Participants need a laptop with at least 8 GB RAM, 40 GB of available disk space and administrative access. A physical jailbroken iOS device running iOS 16 or later, or access to a suitable virtualized environment such as Corellium, is required to complete the labs.
What language is the course delivered in?
The video instruction is in English. Subtitles are available in English, German, Spanish, French, Arabic and Japanese.
Does the course prepare me for certification?
Yes. The course prepares participants for the Certified iOS Security Researcher (CISR) certification from 8kSec Academy. The certification assesses practical knowledge of advanced iOS security, including userland and kernel components.
Is the certification exam included?
Yes. One attempt at the Certified iOS Security Researcher (CISR) certification exam is included in the course price.
How is the certification exam structured?
The CISR certification exam is a 24-hour hands-on assessment designed to evaluate practical iOS security research skills. Participants must successfully complete the assessment to earn the certification.
Will I receive a certificate of completion?
Yes. Participants receive a certificate of course completion. The CISR professional certification is awarded separately after successfully passing the certification exam.
Can the course be purchased for a team or organisation?
Yes. Group enrolment is available for organisations wishing to train multiple employees. The training provider offers group pricing and optional learner progress tracking for larger teams.
What makes this course valuable?
The course provides specialised training in the internal workings of iOS and the security mechanisms that protect the platform. Through reverse engineering, practical labs and vulnerability case studies, participants develop skills relevant to advanced mobile security research, kernel analysis and exploitation research.
