Reverse Engineering iOS Screen Mirroring with Golang
summary
Reverse engineers extract USB packets with Wireshark on macOS, identify four-byte length framing and a mix of little/big-endian fields, map string keys to Apple CoreMedia sample buffer properties, and recognize payloads as H.264 NAL units. A Go implementation using Go + libusb decodes messages, writes playable H.264 files, and streams via GStreamer; it runs on Linux and macOS (no Windows). Tests use golden-file unit tests and the project is MIT licensed and working.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:08Reverse engineering background
- 3:54Approach to reverse engineering
- 6:23Capturing USB traffic
- 9:11Decoding message framing
- 12:40Analyzing protocol structure
- 16:18Identifying H.264 video format
- 18:23Why use Golang
- 20:35Unit testing reverse engineered code
- 22:45Learning from low-level details
- 24:31Live demonstration
- 25:15Implementation and compatibility
- 26:17Q&A session
related talks
47mReverse Engineering Go Malware: From Manual to AI-Powered Analysis
57mHacking with Go
06mMobile Game Development in Go
27mA Deep Dive into Go Malware: Using Metadata to Empower the Analyst
05mUnleashing Desktop App Development with Go and Fyne
42mComputer Vision Using Go And OpenCV 3
37mComputer Vision Using Go And OpenCV 3
29mGo at Tailscale