Everybody be cool, this is a roppery!

We present algorithms which allow an attacker to search for and compose gadgets regardless of the underlying architecture using the REIL meta language. Gadgets are code fragments which can be used to build unintended programs from existing code in memory. Our contribution is a framework of algorithms capable of locating a Turing-complete gadget set and a returnoriented compiler for the ARM architecture as a proofof-concept implementation. This compiler accepts inputs in an assembly-like language, simplifying the otherwise tedious gadget selection process by hand. Therefore it enables the researcher to focus on the other parts of successful exploitation by minimizing the shellcode development time. Furthermore we will discuss the necessary steps for successful exploitation of iPhoneOS using the developed framework and the compiler.