15 ms·

They definitely showed that this approach can be used in a real-life scenario last year, when they broke some voting machines using ROP. http://www.scienceblog

They definitely showed that this approach can be used in a real-life scenario last year, when they broke some voting machines using ROP. http://www.scienceblog.com/cms/computer-scientists-take-over-electronic-voting-machine-new-programming-technique-23894.html http://www.scienceblog.com/cms/computer-scientists-take-over...

swolchok 17y ago
It's been done on sensor motes too. http://planete.inrialpes.fr/~francill/Papers/Code_Injection_Harvard_francillon_ccs08.pdf http://planete.inrialpes.fr/~francill/Papers/Code_Injection_... It's not surprising that it's practical; it's basically just a souped up ret2libc attack.