3 ms·
At the time, Todd was testing with whatever the popular rop compiler was, and it wasn't able to chain anything using libc. Even on amd64 you can restrict which
by tedunangst 3y ago
At the time, Todd was testing with whatever the popular rop compiler was, and it wasn't able to chain anything using libc. Even on amd64 you can restrict which gadgets are available. Maybe you can find other approaches with a careful hand search, but I think knocking out the biggest exploit generator is hardly flawed in a practical sense.
- saagarjha 3y agoPeople don't generate exploits using popular ROP compilers.
- beachhead 3y agowhat are popular ROP compilers used for then?
- saagarjha 3y agoCTF challenges mostly
- beachhead 3y agoso they're used in combination with already known exploits but you're saying no one uses them during the development of exploits?
- saagarjha 3y agoNo, they’re mostly toys and demos. They’re not an accurate representation of real-world exploit development.
- beachhead 3y agooh i must be confused about what a CTF challenge is
- saagarjha 3y agoCTF challenges are to cooking competitions what exploit development is to being a restaurant cook. There are time limits, practicality is less of a concern, and everyone knows that toy constraints are added because nobody wants to watch you stare at IDA for three weeks