234 Chapter7·OperatingSystemandDeviceVulnerabilities [[**]]ABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFG[\x02\x03\x04\x06\x08\x09\x0a\x0d\x10\ x12\x14\x16\x22\x23\x24\x2f\x30\x32\x34\x36\x38\x39]XYZABCDEFGHIJKLMNOPQR"); </script> </body> Thanks to Charles Miller (iPhone hacking expert) for the details of this exploit! Tool Tip ­ Iphonedbg One of the most beneficial tools of exploitation development is the debugger. Without this tool, it is very hard to find and determine how to exploit a vulnerability because there are often anomalies that are impossible to bypass without an insider's help. Core Security, a com- pany well known for their automated penetration testing toolkit, has provided a freely available debugger inspired from weasel, the same tool H.D. Moore used, that not only provides a great debugging environment, but also offers tools to set up a tunnel from the PC to the iPhone via USB, and includes tools to debug iPhone libraries, not just executables (iphonedbg). Core Security provides a lot of valuable detail on how to use this debugger and its associated files at http://oss.coresecurity.com/projects/iphonedbg.html. Symbian Symbian currently holds the largest market share of mobile devices in the world. They have accomplished this by tying themselves to carriers such as NTT DoCoMo (Japan's primary carrier) and through marketing campaigns that appeared to have a great influence in the European market. However, despite the rather large mobile market in the U.S., Symbian has a dwindling market share--to the point where they are now rarely seen--if at all. In June 2008, Nokia purchased the Symbian OS and set it free--as in free to mobile device carriers. This move was designed to take market share away from cell phone OS vendors like Microsoft, who charge for their OS to be installed on a phone. In addition to dropping the cost to nil, Nokia has promised to make the OS open source, which is a move meant to combat the up and coming Android from Google. While history has yet to be made with regard to the future of Symbian, the mobile market has matured enough to realize that the key to a successful mobile operating system are the opportunities and tools available to developers, as well as the comfort level for the user. Regardless, with a 65 percent worldwide market share, Symbian remains a force to be reckoned with. Symbian Details The following section will detail components of the Symbian OS with regards to security. Other features and functions will not be addressed. Due to the relatively large number of