Nullcon Goa 2018:- Expanding Exploitation Beyond X86 And ARM

This talk explores the expansion of exploitation techniques beyond traditional X86 and Arm architectures, focusing on the Xtensa platform, which has gained significant traction in the IoT space with over 100 million devices distributed by early 2018. The speakers, Carel van Rooyen and Philipp Promeuschel, provide insights into the fundamental differences between ARM and Xtensa architectures, particularly from an exploiters' perspective. They discuss security mechanisms supported by operating systems for these architectures and highlight basic assembly instruction differences. The session also covers topics such as gadget searching, stackless architecture, and methods to achieve post-boot persistence.