Full Disclosure mailing list archives
Re: Multipath-ROP: Tools available?
From: Stefan Esser <stefan.esser () sektioneins de>
Date: Thu, 21 Jul 2011 09:37:02 +0200
Hello,
Does someone know about this method? If there are no tools available for that, I would like to create one, that uses markov-chains for library analysis and that should support multiple CPU-archs.
As far as I know there are no tools available for this. However I submitted a talk to HITB2011KUL about exactly this technique applied to iPhone exploitation. So there should be a tool for this in October. Not only covering exploiting ASLR but also ROP payloads that work against different devices (different library load offset by device class/firmware version). Regards, Stefan Esser _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Multipath-ROP: Tools available? halfdog (Jul 21)
- Re: Multipath-ROP: Tools available? Stefan Esser (Jul 21)
- Re: Multipath-ROP: Tools available? Dan Rosenberg (Jul 21)
- Re: Multipath-ROP: Tools available? halfdog (Jul 21)
- Message not available
- Re: Multipath-ROP: Tools available? halfdog (Jul 21)
- Re: Multipath-ROP: Tools available? Stefan Esser (Jul 21)
- Message not available
- Re: Multipath-ROP: Tools available? halfdog (Jul 22)
- Re: Multipath-ROP: Tools available? halfdog (Jul 23)
- Re: Multipath-ROP: Tools available? halfdog (Jul 22)