5

I was wondering about since, Ret2Libc attack doesn't works on ARM, and we have to rely on ROP for that. How different is ROP on ARM from the x86 architecture.

Are there any tools, such as mona.py for x86, for ARM? Which would generate me long chains of gadgets.

Also, if there are any resource available online on it (ROP on ARM, or simply ROP, except the corelan one), do point me to that.

Improve this question

1 Answer 1

Reset to default
5

You should look at the BlackHat talk ARM Exploitation ROPmap. In short you can find ROP gadgets with any assembler variant, just the rules are a little different for ARM.

Before tools like mona we used objdump and grep!

Improve this answer
2

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .