Can't Stop the ROP: Automating Universal ASLR Bypass and ROP Generation
Presents an automated framework for generating universal return-oriented programming chains and bypassing ASLR across modern operating system binaries.
Summary
The Evolution of Return-Oriented Programming
Modern exploit mitigation technologies, such as Address Space Layout Randomization (ASLR) and Data Execution Prevention (DEP), require exploit developers to construct intricate Return-Oriented Programming (ROP) chains to execute arbitrary code.
Automating Gadget Discovery and State Tracking
Tim Becker introduces an automated exploitation framework that parses binary disassembled code, tracks register state transitions, and stitches together robust ROP gadgets across target memory spaces.
Universal ASLR Bypass Techniques
The framework leverages memory disclosure primitives and partial pointer overwrites to defeat ASLR dynamically, constructing functional ROP chains without prior knowledge of base addresses.
Implications for Exploit Mitigation Engineering
Automated ROP synthesis demonstrates that traditional runtime protections must be augmented with fine-grained control-flow integrity (CFI), memory tagging, and memory-safe language adoption.
Related talks
Main Stage·48 min
Stephen Sims
Evolution of binary exploitation techniques, hardware and OS mitigations, and the future of low-level vulnerability research.
Main Stage·36 min
Hadrian Barral
Introduces modern shellcoding techniques that survive ASLR, NX, and common AV detection by combining gadget chaining with runtime resolution.
Briefings·37 min
Marcos Bajo · Christian Rossow
Security researchers reveal how transient execution gadgets bypass modern hardware and compiler-level control flow integrity protections.