Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I was wondering about since, Ret2Libc attack doesn't works on ARM, and we have to rely on ROP for that. How different is ROP on ARM from the x86 architecture.

Are there any tools, such as mona.py for x86, for ARM? Which would generate me long chains of gadgets.

Also, if there are any resource available online on it (ROP on ARM, or simply ROP, except the corelan one), do point me to that.

share|improve this question

1 Answer 1

You should look at the BlackHat talk ARM Exploitation ROPmap. In short you can find ROP gadgets with any assembler variant, just the rules are a little different for ARM.

Before tools like mona we used objdump and grep!

share|improve this answer
    
Why did your link point to google redirect? –  F. Hauri Mar 16 '13 at 10:44
    
@F.Hauri Hasty copy-paste from Google search results, maybe? I used to do this all the time, until someone pointed me to a browser extension. –  Gilles Mar 19 '13 at 17:18

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.