avrop
avrop copied to clipboard
FSecureLABS
ROP based Movfuscator VM
#AVRop VM PoC
PoC code for a ROP based movfuscator virtual machine running on a Harvard device.
ropMenu is a vulerable application for an Arduino Mega2560 where you can add and read notes over UART.
Find out more from https://labs.mwrinfosecurity.com/blog/avrop
##PoC Compile ropMenu using Atmel Studio and dowload it to an Arduino Mega2560 You can connect to the application over UART on TX0/RX0:
screen /dev/ttyUSB0 38400 8N1
To exploit the appication run the ROP.py script with a payload
python ./ROP/ROP.py ./payloads/blink.bin
or
python ./ROP/ROP.py ./payloads/uart.bin
FSecureLABS