RSS Amplifier

· Nov 9, 2024

advanced memory protection bypasses, part 1: bypassing ASLR

0
Sign in to vote or save

This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.

tl;dr ROP (Return Oriented Programming) techniques made many stack buffer overflows exploitable, despite DEP (Data Execution Prevention), leading to the introduction of ASLR (Address Space Layout Randomization) as a countermeasure (that randomizes memory addresses). to bypass ASLR + DEP, you need three elements: exploiting a logic flaw to bypass ASLR’s randomization. using ROP chains to work…

tl;dr ROP (Return Oriented Programming) techniques made many stack buffer overflows exploitable, despite DEP (Data Execution Prevention), leading to the introduction of ASLR (Address Space Layout Randomization) as a countermeasure (that randomizes memory addresses). to bypass ASLR + DEP, you need three elements: exploiting a logic flaw to bypass ASLR’s randomization. using ROP chains to work around DEP restrictions. implementing dynamic shellcode encoding to handle “bad characters”. this post focuses on the first point.

Read on /posts/aslr_rop/

Comments

Nothing yet. Say the first thing.

    Sign in to join the conversation.