Tag Info

New answers tagged

2

Exploit developers use ROP chains when there is no other option. ASLR limits where an exploit can jump reliably, as the heap and stack address will be randomized. However, some of the application's own functionality may not be randomized. When an attacker is forced into this position, they use a series of ROP gadgets to establish an environment that can ...


1

It depends. DEP blocks you from just doing a jump to esp and executing code there. ASLR is your major important thing to bypass here. There are a number of ways that you might be able to do this: Modules loaded into the process which don't have ASLR enabled. There are a bunch of ways this might happen: DLLs that are a part of your application which were ...



Top 50 recent answers are included