5

I was wondering about since, Ret2Libc attack doesn't works on ARM, and we have to rely on ROP for that. How different is ROP on ARM from the x86 architecture.

Are there any tools, such as mona.py for x86, for ARM? Which would generate me long chains of gadgets.

Also, if there are any resource available online on it (ROP on ARM, or simply ROP, except the corelan one), do point me to that.

5

You should look at the BlackHat talk ARM Exploitation ROPmap. In short you can find ROP gadgets with any assembler variant, just the rules are a little different for ARM.

Before tools like mona we used objdump and grep!

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.