This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.
tl;dr ROP (Return Oriented Programming) techniques made many stack buffer overflows exploitable, despite DEP (Data Execution Prevention), leading to the introduction of ASLR (Address Space Layout Randomization) as a countermeasure (that randomizes memory addresses). to bypass ASLR + DEP, you need three elements: exploiting a logic flaw to bypass ASLR’s randomization. using ROP chains to work…
tl;dr ROP (Return Oriented Programming) techniques made many stack buffer overflows exploitable, despite DEP (Data Execution Prevention), leading to the introduction of ASLR (Address Space Layout Randomization) as a countermeasure (that randomizes memory addresses). to bypass ASLR + DEP, you need three elements:
exploiting a logic flaw to bypass ASLR’s randomization.
using ROP chains to work around DEP restrictions.
implementing dynamic shellcode encoding to handle “bad characters”.
this post focuses on the first point.Read on /posts/aslr_rop/ ↗
Comments
Nothing yet. Say the first thing.
Sign in to join the conversation.