CIRCLE WITH A DOT

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

jjtech@infosec.exchange

@jjtech@infosec.exchange

Topics

J

For anyone else capturing #USB on #macOS on Apple Silicon:It does work, you just have to disable SIP entirely first (individual flags don't work, need csrutil disable)You need to manually set the correct interface up, e.g. sudo ifconfig XHC2 up
Watching Ignoring Scheduled Pinned Locked Moved Uncategorized usb macos
2

0 Votes

2 Posts

0 Views

J

I wanted to use this to decrypt connections made using MobileDevice.framework over lockdownd, so I created the following:Custom #Wireshark dissector for the usbmuxd TCP encapsulation:https://gist.github.com/JJTech0130/da77af43269076f6ea78f69471d1df6eSSL keylog for the version of LibreSSL it links (using #Frida)https://gist.github.com/JJTech0130/e238798e66fe70abc16f1c6dc6c28ab3Thanks @nicolas17 for the help!

CIRCLE WITH A DOT

jjtech@infosec.exchange

Topics

For anyone else capturing #USB on #macOS on Apple Silicon:It does work, you just have to disable SIP entirely first (individual flags don't work, need csrutil disable)You need to manually set the correct interface up, e.g. sudo ifconfig XHC2 up