1 of 8

09/19/24

Return Oriented Programming

Robert Wasinger

CSE466 Computer Systems Security

Arizona State University

2 of 8

Memes - Thinking about memory relatively

3 of 8

Memes - Yan’s Legos

4 of 8

Memes - The power of gaining control flow

5 of 8

Logistics

  • Robert Office Hours
    • Friday 12pm - 2pm @ BYENG222
    • WILL NOT BE STREAMED
    • If you cannot attend and want to meet in person, please schedule with me
  • Recitations on Mon, Wed, Fri have been moved
    • Same time: 4:30 - 5:30
    • Different place: BYAC270

6 of 8

#DojoLife

  • GDB
    • I’m throwing around temporary fixes for the CURRENT MODULE
    • Behavior may be different outside ROP module
    • That black magic incantation should no longer be needed?
    • If something seems broken LET ME KNOW SO I CAN FIX IT
  • Ropper
    • Apparently it is not installed on the dojo? I will fix this in the next day or so

​

7 of 8

#DojoLife

Why did Tuesday’s demo go off the rails?

  • I did not chown the binary
  • I did not chmod the binary
  • I was working in the /home/hacker directory
  • /home/hacker is mounted nosuid

​

Key Lesson: Sleep is important

8 of 8

Demo Plans (time permitting)

  • STOP RELYING ON THE CHALLENGE HELP TEXT
  • A quick journey through the PLT and GOT
  • Parsing leaks
  • Pwntools ELF
  • Pwntools ROP functionality