Dr Bramwell Brizendine - JOP ROCKET: A Wicked Tool for JOP Gadget Discovery
Introduces JOP ROCKET, an open-source tool for discovering Jump-Oriented Programming gadgets to build control-flow hijacking exploits.
Summary
JOP Gadget Discovery with JOP ROCKET
Dr Bramwell Brizendine presents JOP ROCKET (Jump-Oriented Programming Rapid Open Catalog of Key Execution Targets), an open-source tool for automating the discovery of JOP gadgets in binary executables.
JOP vs. ROP
Return-Oriented Programming (ROP) chains gadgets ending in RET instructions; Jump-Oriented Programming (JOP) instead chains gadgets ending in indirect JMP or CALL instructions, enabling exploitation even when the stack is controlled by a shadow stack or CET enforcement.
JOP ROCKET Architecture
The tool supports x86, x86-64, and ARM architectures, implements multiple search strategies (linear sweep, recursive descent), and classifies discovered gadgets by type (dispatcher gadgets, functional gadgets, update gadgets) according to the formal JOP gadget taxonomy.
Real-World Exploit Construction
Brizendine demonstrates constructing a JOP chain against a real CVE in a consumer application, showing the full workflow from binary analysis through gadget selection to exploit delivery.
Related talks
Main Stage·36 min
Hadrian Barral
Introduces modern shellcoding techniques that survive ASLR, NX, and common AV detection by combining gadget chaining with runtime resolution.
Main Stage·43 min
Daniel Selifonov
Daniel Selifonov explores advanced memory corruption exploitation primitives, demonstrating deterministic heap layout manipulation and mitigation bypasses.
Main Stage·46 min
Bramwell Brizendine · Davy Kusuma
Dr. Bramwell Brizendine and Davy Kusuma present ROP ROCKET, an automated ROP compiler supporting Heaven's Gate architecture switching and bad-byte gadget synthesis.