Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I was wondering about since, Ret2Libc attack doesn't works on ARM, and we have to rely on ROP for that. How different is ROP on ARM from the x86 architecture.

Are there any tools, such as for x86, for ARM? Which would generate me long chains of gadgets.

Also, if there are any resource available online on it (ROP on ARM, or simply ROP, except the corelan one), do point me to that.

share|improve this question

You should look at the BlackHat talk ARM Exploitation ROPmap. In short you can find ROP gadgets with any assembler variant, just the rules are a little different for ARM.

Before tools like mona we used objdump and grep!

share|improve this answer
Why did your link point to google redirect? – F. Hauri Mar 16 '13 at 10:44
@F.Hauri Hasty copy-paste from Google search results, maybe? I used to do this all the time, until someone pointed me to a browser extension. – Gilles Mar 19 '13 at 17:18

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.