ASLRay

[Nytro]

ASLRay

Linux ELF x32 and x64 ASLR bypass exploit with stack-spraying

Properties:

• ASLR bypass
• Cross-platform
• Minimalistic
• Simplicity
• Unpatchable

Dependencies:

• Linux 2.6.12+ - would work on any x86-64 Linux-based OS
  • BASH - the whole script

Limitations:

• Stack needs to be executable (-z execstack)
• Binary has to be exploited through arguments locally (not file, socket or input)
• No support for other architectures and OSes (TODO)
• Need to know the buffer limit/size

 

Sursa: https://github.com/cryptolok/ASLRay#aslray