2 ms·
But with ROP, there's usually no need to write into the text-segment to execute arbitrary code.
by 0x0 9y ago
But with ROP, there's usually no need to write into the text-segment to execute arbitrary code.
- deleted 9y ago[deleted]
- blackflame7000 9y agoIn order to do ROP, you need to chain together gadgets of code segments which means you need to be able to see the source code/binary. This doesn't reveal any information about the call stack nor the available libraries to chain together ROP. And that's if stack canaries haven't screwed things up already.