Make ARM Shellcode Great Again

on YouTube ↗57m

" summary

Covers practical techniques for writing reliable ARM shellcode that works on modern, varied ARM hardware (including IoT devices) rather than just emulators. Discusses handling cache coherency, building reliable polymorphic and egghunter shellcode, and creating polyglot ARM shellcode, with demonstrations across different ARM architectures.

AI-written summary · about

" chapters (17)

1. 0:00Intro
2. 0:20Make ARM Shellcode Great Again Saumil Shah
3. 2:46Example: ARM execve() Shellcode
4. 6:16THUMB Mode
5. 7:08Some Concerns / Arguments
6. 9:03ARM/THUMB Encoding: mov r1, #7
7. 11:56Opening the Box
8. 12:39Quantum Leap' Shellcode
9. 13:44"Quantum Leap" - what we need
10. 18:47The ARM to Thumb switch
11. 20:12ARM and THUMB decoding - 1
12. 23:29(Un)conditional Instructions
13. 25:00ARM and THUMB decoding - 2
14. 35:35Final "Quantum Leap" Code
15. 37:39Assembling the Quantum Leap
16. 38:48Shellcode in tight spaces
17. 51:54Conclusion

" related talks

• 57mReturn Oriented Programming, an introductionPatricia Aas · NDC Security 2023
• 57mReturn Oriented Programming, an introductionPatricia Aas · NDC TechTown 2023
• 51mThe Anatomy of an ExploitPatricia Aas · ACCU 2019
• 19mDisARMed: Attacking ARM TrustZone from Userspace with Memory AliasingDavid Oswald, Jacqueline Henes, Matthew Bowden, Mihai Ordean · 20th USENIX WOOT Conference on Offensive Technologies (WOOT '26)
• 27mUSMA: Share Kernel Code With MeYong Liu, Jun Yao, Xiaodong Wang · Black Hat Asia 2022
• 51mExploiting Hardware Glitches And Side Channels In Perfect SoftwareHerbert Bos · OWASP Global AppSec Amsterdam 2019
• 18mAutomatic Generation of Compact Printable Shellcodes for x86Aditya Basu, Dhrumil Patel, Anish Mathuria · WOOT '20
• 57mThe Anatomy of an ExploitPatricia Aas · NDC TechTown 2019