Return-oriented programming

Presentation

1. Introduction

   • What is return-oriented programming?
   • Before we begin...
   • Examples
   • History

2. Return-oriented programming in a nutshell

   • x86 crash course
   • Stack buffer overflow
   • Gadgets

3. Demonstration

   • ROPgadget – a ROP compiler
   • Stupid vulnerable program
   • Showtime!

4. Countermeasures

   • ASLR and PIE
   • Stack canaries and shadow stacks
   • CFI and ROPdefender

5. Conclusion

Demonstration

The demo directory contains a working example program a Makefile, which automates generation and execution of a suitable exploit.

License

This work is licensed under a Creative Commons Attribution-ShareAlike 3.0 Unported License.