Hacker News new | ask | show | jobs
by somat 1234 days ago
Openbsd also puts a fair amount of work into removing ROP gadgets.

For example.

https://marc.info/?l=openbsd-cvs&m=152824407931917

3 comments

Very cool, thank you for sharing! Not only does ROP facilitate traditional binary exploitation, but it’s also used in cutting-edge evasive techniques. By abusing ROP instead of direct calls, red teamers are able to heavily obfuscate activities from endpoint detection and response.
Uh, yeah... The post opens with a mention of being inspired by OpenBSD and goes into some detail on differences between their approach and OpenBSD's throughout.
Though, much less effective than reordering gadgets.