A qualitative framework for evaluating buffer overflow protection mechanisms

2016 ◽  
Vol 8 (3) ◽  
pp. 272
Author(s):  
N. Raghu Kisore
Keyword(s):  
Buffer Overflow ◽  
Protection Mechanisms

scholarly journals Return Oriented Programming - Exploit Implementation using Pwntools

2020 ◽  
pp. 194-198
Author(s):  
Jayesh Zala
Keyword(s):  
Operating System ◽  
Buffer Overflow ◽  
Machine Code ◽  
Software Vulnerabilities ◽  
New Findings ◽  
Protection Mechanisms ◽  
Return Oriented Programming ◽  
Turing Complete

<p>A common approach to leverage software vulnerabilities in the contemporary operating system has been the Return-Oriented Programming(ROP) attack. Although protection mechanisms are involved in the OS, an attacker may execute arbitrary code with the support of ROP. A decade ago, Return Oriented programming was designed to solve the buffer overflow exploit security mechanisms such as ASLR, DEP (or W?X) by reusing the machine code in the form of gadgets that are stitched together to render a full assault on Turing. And it will take more complex efforts to conduct a Turing complete attack, and very little data is possible to perform it with raw input. Therefore, in this project, we are systematizing the interpretation of the new findings that can be used to carry out a full ROP attack with the help of pwntools python library.</p>

Sign in / Sign up

Export Citation Format

Share Document