Modern Exploit Mitigations & Bypasses
Understand the defenses that stand between a vulnerability and a working exploit: ASLR, DEP/NX, stack canaries, CFG, and the high-level ideas behind bypassing them.
Modern Exploit Mitigations & Bypasses is a free Reverse Engineering & Binary Analysis Basics lesson on CoddyKit — lesson 4 of 4. You can read the complete lesson below for free — then practise it hands-on in the browser with a built-in code editor and a 24/7 AI tutor. It is part of the Reverse Engineering & Binary Analysis Basics learning path, one of 4 lessons in the course, and your progress syncs across the web and the CoddyKit app.
Why Exploits Got Harder
You can identify binary vulnerabilities, fuzz for bugs, and understand exploit primitives. Modern systems add mitigations that turn an easy bug into a hard one.
Knowing these defenses tells you what a working exploit must overcome.
Data Execution Prevention (DEP/NX)
DEP (a.k.a. the NX bit) marks memory as non-executable. Code injected onto the stack will not run.
This killed classic 'shellcode on the stack' attacks and pushed exploiters toward code reuse.
Return-Oriented Programming
To bypass DEP, attackers reuse existing executable code. ROP chains together short instruction sequences (gadgets) ending in ret to perform arbitrary actions without injecting code.
; a gadget
pop rdi
ret
; chained: set rdi, then call a real functionAddress Space Layout Randomization
ASLR randomizes where modules, stack, and heap load each run, so attackers cannot hardcode addresses.
Without a known address, both shellcode and ROP gadgets are hard to target.
Defeating ASLR with Leaks
ASLR is bypassed with an information leak: a bug that discloses a real runtime address. From one leaked pointer you compute the module base and locate your gadgets.
Many modern exploits are really 'leak then exploit' two-stage attacks.
Stack Canaries
A stack canary is a random value placed before the saved return address. A linear stack overflow overwrites it, and the function aborts on mismatch.
; epilogue check
mov rax, [rbp-8]
xor rax, fs:[0x28]
jne __stack_chk_failBypassing Canaries
Canaries are defeated by:
- Leaking the canary value, then writing it back unchanged
- Overwriting structures that skip the check (e.g. a non-linear write)
This is why info leaks are so valuable.
Control-Flow Integrity
CFI and Windows' CFG validate indirect calls and returns against a set of legitimate targets, breaking many ROP chains.
Hardware features like Intel CET add a shadow stack to protect return addresses.
RELRO and Fortify
Other hardening you will encounter:
- Full RELRO makes the GOT read-only, blocking GOT-overwrite tricks
- FORTIFY_SOURCE adds bounds checks to common functions
Check which are enabled before planning an approach.
checksec --file=./target
# RELRO: Full Canary: Yes NX: Yes PIE: YesThe Mitigation Mindset
Exploit development is an enumerate-then-bypass process: list active mitigations, then find the bug or leak that neutralizes each. Strong defenses do not make exploitation impossible, only more demanding.
PIE and Position Independence
PIE (Position Independent Executable) lets ASLR randomize the main binary itself, not just libraries. Without PIE, the executable loads at a fixed base, giving attackers reliable gadget addresses.
checksec reporting 'PIE: No' is a meaningful weakness worth noting.
Quick Check
Which technique is specifically designed to bypass DEP/NX by reusing existing executable code instead of injecting new code?
Recap
You now map the modern defensive landscape:
- DEP/NX blocks injected code; ROP reuses existing code
- ASLR randomizes addresses; info leaks defeat it
- Canaries, CFI/CFG, RELRO add further hurdles
Real exploitation means enumerating these and chaining bugs to bypass each.
Frequently asked questions
Is the “Modern Exploit Mitigations & Bypasses” lesson free?
Yes — the full text of “Modern Exploit Mitigations & Bypasses” is free to read here on the web, and the Reverse Engineering & Binary Analysis Basics course includes 4 lessons in total. To practise it interactively (a built-in code editor and a 24/7 AI tutor) and unlock the rest of the Reverse Engineering & Binary Analysis Basics course, upgrade to CoddyKit PRO.
What will I learn in “Modern Exploit Mitigations & Bypasses”?
Understand the defenses that stand between a vulnerability and a working exploit: ASLR, DEP/NX, stack canaries, CFG, and the high-level ideas behind bypassing them. You practise Reverse Engineering & Binary Analysis Basics with hands-on code you run directly in the browser, and a 24/7 AI tutor answers your questions as you work through the lesson.
Do I need any experience to start Reverse Engineering & Binary Analysis Basics?
No prior experience is required. Reverse Engineering & Binary Analysis Basics on CoddyKit is structured for beginners through advanced learners; this is — lesson 4 of 4, so you can start here or from the beginning and move at your own pace.
How long does the “Modern Exploit Mitigations & Bypasses” lesson take?
Most CoddyKit lessons take about 5–10 minutes. Each one is bite-sized and interactive, so you make steady progress and pick up exactly where you left off across the web and the app.
Can I write and run code in this Reverse Engineering & Binary Analysis Basics lesson?
Yes. Every Reverse Engineering & Binary Analysis Basics lesson includes a built-in code editor, so you write and run real code right in your browser and get instant AI feedback — no local setup required.
All lessons in this course
- Identifying Binary Vulnerabilities
- Introduction to Fuzzing
- Exploit Primitives Overview
- Modern Exploit Mitigations & Bypasses