I'm reversing a closed platform to try gain execution using an exploit, a stack overflow. I've been told that (since there are no debuggers) the best way is to use RAM dumps (that I have) to try understand how long the buffer is, where the Link Register after the buffer is, how the calling convention works... so I can create a exploit successfully.
More info about the platform.
- ARM Architecture (ARM9 and ARM11 processors)
- NX bit but no ASLR (That's why I need to know also which memory pages are executable to get ROP gadgets)
- I have no debuggers. Only RAM Dumps
I would like to know how can I identify the stack in memory (although there may be more than one) and how to identify also memory pages, and know which ones are executable.