Taint-Based Return Oriented Programming

Explore taint-based return oriented programming (T-Brop) in this conference talk from Recon Conference. Discover an innovative approach that bridges the gap between syntactic and symbolic tools for return oriented programming (ROP). Learn how T-Brop offers a faster alternative to symbolic tools while enabling more expressive queries than syntactic tools. Understand the concept of using a coarse semantic of instructions based on dependency matrices to reflect taint propagation in gadgets. Gain insights into how this intermediate approach compares to existing ROP tools and its potential applications in security research and exploit development.

Taint-based return oriented programming Colas Le Guernic & François Khourbiga