21、Return-Oriented Programming (ROP) in iOS: Techniques, Payloads, and Testing

Return-Oriented Programming (ROP) in iOS: Techniques, Payloads, and Testing

1. Introduction to ROP and Its Complexity

Return-Oriented Programming (ROP) is a powerful exploitation technique. However, even simple operations like writing to a remote server and closing the connection can become quite lengthy when implemented using ROP, especially when the attacker has limited usable instructions.

2. Automating ROP Payload Construction

2.1 Manual vs Automated Approaches

Manually finding suitable instructions for ROP payloads is a cumbersome and time - consuming process. Over the past few years, several approaches have been proposed to automate this process.

2.2 Kornau’s Methodology

Kornau presented a comprehensi