ROPGenerator – Tool That Helps You Building ROP Exploits By Finding And Chaining Gadgets Together

ROPGenerator is a tool that makes ROP exploits easy. It enables you to automatically find gadgets or build ROP chains. The current version supports x86 and x64 binaries.OverviewROPGenerator uses the tool ROPgadget (https://github.com/JonathanSalwan/ROPgadget) to extract gadgets from binaries and the barf-project (https://github.com/programa-stic/barf-project) to disassembly them. After gadgets are extracted, it analyzes them in order to compute their semantic and stores them according to their usefullness. Once the analysis is done, you can request ROPGenerator to automatically find gadgets or ROP chains by supplying semantic queries.ROPGenerator is written in python. The tool has python2-only dependencies so it runs under python2 so far.Please note that the current ROPGenerator version is still a beta under active development, therefore it might not work perfectly on some systems.Why using ROPGenerator ?Nice Command Line Interface : Enjoy a nice and smooth CLI with easy-to-use commandsSemantic gadget search : Find your gadgets quickly by only specifying the desired semanticsGadget chaining engine : No suitable single gadget ? ROPGenerator will build ROP chains for youFully automated exploit building : ROPGenerator can build entire exploits… all by itself !InstallationInstall ROPGeneratorYou can download the source and run$ python setup.py install$ ROPGeneratorInstall DependenciesROPGenerator depends on ROPgadget, prompt_toolkit, enum, python-magic, pwntools and barf v0.4.0:python-magic, enum, pwntools barf v0.4.0, and prompt_toolkit packages will be added automaticaly during installationROPgadget will also be installed automatically if you don’t have it already. However, the currently available package on pypi is not up-to-date. Therefore, it will be installed as “ROPgadget4ROPGenerator", a recent fork of ROPgadget.Getting startedROPGenerator is very easy to use ! For a quick starting guide, check ROPGenerator’s WikiScreenshotsGet helpLoad gadgets from a binaryEasily look for gadgets !Download ROPGenerator

Link: http://feedproxy.google.com/~r/PentestTools/~3/XTBQY7vfKCE/ropgenerator-tool-that-helps-you.html