07 July, 2021 - 02:20 PM
(10 May, 2021 - 10:53 PM)sheikhlipubd Wrote: Show MoreWhat is ROP:
ROP is that return-oriented programming (ROP) is a commonly used technique in exploitation to gain code execution
Why ROP:CSGO is protected by Valve Anti-Cheat (short VAC)
BF3 and BF4 are protected by PunkBuster (short PB)
ROP should be very difficult to detect for these Anti-Cheats for the following reasonsDOWNLOAD:
- The cheats program code consists of a list of volatile memory addresses that change with each game and computer restart
- Afaik VAC prefers to analyze memory pages that are marked as executable but for ROP the list of return addresses doesn't require to be on an executable memory page.
- Additionally, the ROP-Compiler supports the option of inserting random padding into the ROP-chain.