metasploit-framework May 2011 archive
Main Archive Page > Month Archives  > metasploit-framework archives
metasploit-framework: Re: [framework] ROP support?

Re: [framework] ROP support?

From: Peter Van Eeckhoutte <peter.ve_at_nospam>
Date: Wed May 18 2011 - 16:57:36 GMT
To: Jun Koi <junkoi2004@gmail.com>

I guess it would need to be able to generate the gadgets from the correct dlls from within the correct context etc

In theory it should be perfectly possible... feel free to apply your patches :)

-----Original Message-----
From: Jun Koi [mailto:junkoi2004@gmail.com]
Sent: woensdag 18 mei 2011 18:53
To: Peter Van Eeckhoutte
Cc: framework@spool.metasploit.com
Subject: Re: [framework] ROP support?

On Thu, May 19, 2011 at 12:38 AM, Peter Van Eeckhoutte
<peter.ve@corelan.be> wrote:
> Msf won't automagically build a rop chain for you, but if you can build one
> yourself and include it in your module, the selected payloads will be more
> than happy to execute for you
>

so Metasploit doesnt make ROP exploit for. this is the (current)
limitation, and will be improved in the future? or there is a reason
for Metasploit not to do that?

thanks,
J

> From: framework-bounces@spool.metasploit.com
> [mailto:framework-bounces@spool.metasploit.com] On Behalf Of Jun Koi
> Sent: woensdag 18 mei 2011 18:21
> To: framework@spool.metasploit.com
> Subject: [framework] ROP support?
>
>
>
> hi,
>
> does current metasploit support ROP-based exploitation? if so, which
> exploitation/payload are available?
>
> thanks,
> Jun
>
> ________________________________
> This transmission is intended only for use by the intended recipient(s). If
> you are not an intended recipient you should not read, disclose, copy,
> circulate or in any other way use the information contained in this
> transmission. The information contained in this transmission may be
> confidential and/or privileged. If you have received this transmission in
> error, please notify the sender immediately and delete this transmission
> including any attachments.
>

This transmission is intended only for use by the intended recipient(s). If you are not an intended recipient you should not read, disclose, copy, circulate or in any other way use the information contained in this transmission. The information contained in this transmission may be confidential and/or privileged. If you have received this transmission in error, please notify the sender immediately and delete this transmission including any attachments.
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework