Return Oriented Shellcode (ROP Shellcode)

This stream will cover the technique known as return oriented shellcode. It is a retired section from my SANS SEC760 course on exploit development. This technique is useful when you cannot get your payload (shellcode) into the target process. Instead, we can string together code sequences (gadgets) to mimic the shellcode.

[@johnnywilliams2641]

Better Than Sex. Better Than Politics. Great video.

[@morganguesdon2202]

always very good content. thank you!

[@mesh3al32]

I don't understand why you are not using Intel syntax its very easy to read and to explain, which make the video more user friendly, other than that thanks for sharing this great content!

[@OffByOneSecurity]

Hey Meshal! If you can read one you can read both. The differences are subtle, such as switching source and destination operands, "movl" instead of "DWORD PTR," () for pointer for ATT instead of [ ] for Intel.... Not too much really. For that example I stuck with ATT as native GDB defaults to ATT. Really no other reason!

[@diegoporras7769]

Nice! Im taking SEC760 in a few weeks (after passing GXPN of course :D )