3 ms·
Openbsd also puts a fair amount of work into removing ROP gadgets. For example. https://marc.info/?l=openbsd-cvs&m=152824407931917 https://marc.info/?l=openbs
by somat 4y ago
Openbsd also puts a fair amount of work into removing ROP gadgets.
For example.
https://marc.info/?l=openbsd-cvs&m=152824407931917 https://marc.info/?l=openbsd-cvs&m=152824407931917
- saagarjha 4y agoThough, much less effective than reordering gadgets.
- rtev 4y agoVery cool, thank you for sharing! Not only does ROP facilitate traditional binary exploitation, but it’s also used in cutting-edge evasive techniques. By abusing ROP instead of direct calls, red teamers are able to heavily obfuscate activities from endpoint detection and response.
- rtepopbe 4y agoUh, yeah... The post opens with a mention of being inspired by OpenBSD and goes into some detail on differences between their approach and OpenBSD's throughout.