Below is a presentation by viaForensics mobile researcher Sebastián Guerrero (@0xroot) at RootedCON 2013. You can find a detailed walkthrough of how to get sys_call_table (discussed in this presentation) in Sebastián’s recent blog post. For videos of the demos discussed, see the presentation below or go there directly: