4 ms·

Thomas, have you seen or heard of any real life exploits utilizing return oriented programming? Its a really really cool idea, but it seems that once you've go

by bigmac 17y ago

Thomas, have you seen or heard of any real life exploits utilizing return oriented programming? Its a really really cool idea, but it seems that once you've got memory corruption, there are easier ways to get arbitrary code execution than return oriented programming.

__bjoernd 17y ago
They definitely showed that this approach can be used in a real-life scenario last year, when they broke some voting machines using ROP. http://www.scienceblog.com/cms/computer-scientists-take-over-electronic-voting-machine-new-programming-technique-23894.html http://www.scienceblog.com/cms/computer-scientists-take-over...
- swolchok 17y ago
  It's been done on sensor motes too. http://planete.inrialpes.fr/~francill/Papers/Code_Injection_Harvard_francillon_ccs08.pdf http://planete.inrialpes.fr/~francill/Papers/Code_Injection_... It's not surprising that it's practical; it's basically just a souped up ret2libc attack.
deleted 17y ago
[deleted]