Home page logo

metasploit logo Metasploit mailing list archives

Re: ROP support?
From: HD Moore <hdm () metasploit com>
Date: Wed, 18 May 2011 16:24:25 -0500

On 5/18/2011 11:52 AM, Jun Koi wrote:
On Thu, May 19, 2011 at 12:38 AM, Peter Van Eeckhoutte
<peter.ve () corelan be> wrote:
Msf won’t automagically build a rop chain for you, but if you can build one
yourself and include it in your module, the selected payloads will be more
than happy to execute for you

so Metasploit doesnt make ROP exploit for. this is the (current)
limitation, and will be improved in the future? or there is a reason
for Metasploit not to do that?

There are a ton of tools for doing the ROP work, including stuff like
msfpescan in Metasploit that can be used to find gadgets. We have a ton
of ROP-enabled exploits today, you can use them as a reference point at


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]