Let's take a look into the iOS Bluetooth stack! Logging all packets with PacketLogger is easy, but how does it work internally? How do bluetoothd and the kernel interact with each other?

Full playlist of reversing shorts: [ Ссылка ]

Apple's Bluetooth developer tools and information: [ Ссылка ]
libimobiledevice: [ Ссылка ]
Information about the CoreCapture framework: [ Ссылка ]
Thesis on the iOS Bluetooth stack: [ Ссылка ]
Bluetooth Core Specification 5.3: [ Ссылка ]

Chapters:
00:00 - Introduction
00:31 - Bluetooth PacketLogger on macOS and Linux
01:15 - Inside the Bluetooth configuration profile
03:20 - CoreCapture and IOKit
05:53 - AppleConverged Transport for PCIe Bluetooth
06:59 - BlueTool vs. bluetoothd
07:40 - Calling BlueTool
08:15 - Takeaways

свернуть