push readme.md

This commit is contained in:
Jonathan Salwan
2011-10-16 11:06:42 +02:00
parent c434754daa
commit b60f637327
+13 -15
View File
@@ -1,7 +1,6 @@
ROPgadget
=========
<pre>
This tool lets you search your gadgets on your binaries (ELF format) to facilitate your ROP exploitation.
Since version 3.0, ROPgadget has a auto-roper for build your payload automatically with the gadgets found.
@@ -28,22 +27,22 @@ Usage
<b>Options</b>
`-d` Dump Hexadecimal
`-g` Search gadgets add make payload
`-v` Version
* `-d` Dump Hexadecimal
* `-g` Search gadgets add make payload
* `-v` Version
<b>Flags</b>
`-bind` Set this flag for make a bind shellcode (optional) (Default local exploit)
`-port` &lt;port&gt; Set a listen port, optional (Default 1337)
`-importsc` &lt;shellcode&gt; Make payload and convert your shellcode in ROP payload
`-filter` &lt;word&gt; Word filter (research slowed)
`-only` &lt;keyword&gt; Keyword research (research slowed)
`-opcode` &lt;opcode&gt; Search a specific opcode on exec segment
`-asm` &lt;instructions&gt; Search a specific instructions on exec segment
`-elfheader` Display ELF Header before searching gadgets
`-progheader` Display Program Header before searching gadgets
`-sectheader` Display Section Header before searching gadgets
* `-bind` Set this flag for make a bind shellcode (optional) (Default local exploit)
* `-port` &lt;port&gt; Set a listen port, optional (Default 1337)
* `-importsc` &lt;shellcode&gt; Make payload and convert your shellcode in ROP payload
* `-filter` &lt;word&gt; Word filter (research slowed)
* `-only` &lt;keyword&gt; Keyword research (research slowed)
* `-opcode` &lt;opcode&gt; Search a specific opcode on exec segment
* `-asm` &lt;instructions&gt; Search a specific instructions on exec segment
* `-elfheader` Display ELF Header before searching gadgets
* `-progheader` Display Program Header before searching gadgets
* `-sectheader` Display Section Header before searching gadgets
<b>Ex</b>
@@ -54,6 +53,5 @@ Usage
./ROPgadget -g ./smashme.bin -opcode "\xcd\x80"
./ROPgadget -g ./smashme.bin -asm "xor %eax,%eax ; ret"
./ROPgadget -g ./smashme.bin -asm "int \$0x80"
</pre>