212 Commits

Author SHA1 Message Date
Jonathan Salwan 98e06b910c Merge pull request #27 from JonathanSalwan/dev
Dev
v5.0
2014-04-17 22:49:09 +01:00
JonathanSalwan a8d649ffd4 Clean files 2014-04-17 22:33:25 +01:00
JonathanSalwan 73b06240ea Push ROPgadget v5 2014-04-17 22:30:52 +01:00
JonathanSalwan d678554850 update sync authors and readme 2014-02-13 16:19:49 +00:00
Dennis Semakin 8fb4ce3e72 Bug fix - shdr segfault parsing. 2014-02-12 22:57:56 +00:00
Jonathan Salwan 407b1fd962 Merge pull request #25 from JonathanSalwan/dev
Push 4.0.3 in master
2013-10-19 04:32:29 -07:00
JonathanSalwan 7acfb7ca3a push 4.0.3 2013-10-19 12:29:21 +01:00
Jonathan Salwan 6e272226f9 Merge pull request #24 from dark-rose/dev
Made searching for gadgets faster
2013-10-19 04:24:27 -07:00
Robin Stenvi 9dffa376b9 Added check to short circuit the outer loop as well 2013-10-19 04:49:44 +02:00
Robin Stenvi 1ef11af48f Implemented comments from allanlw 2013-10-19 03:13:38 +02:00
Robin Stenvi ec933cc86a Added check for malloc error 2013-10-18 15:45:10 +02:00
Robin Stenvi fd17784f36 Added filtering functionality, so that searching for gadgets is faster. 2013-10-18 00:26:30 +02:00
Jonathan Salwan 8ab7808d6f Update README.md
Type fix
2013-08-21 20:09:32 +02:00
JonathanSalwan 1be2a653d0 Fix compatibility python - cf https://twitter.com/roman_soft/status/359464332314152960 2013-07-23 12:18:56 +00:00
Jonathan Salwan e723595120 Merge pull request #21 from JonathanSalwan/master
Fix compatibility python - cf https://twitter.com/roman_soft/status/3594...
2013-07-23 03:21:47 -07:00
JonathanSalwan 9546acf253 merge 2013-06-25 13:54:18 +02:00
Jonathan Salwan b9fa6c5135 Merge pull request #19 from tecknicaltom/master
Enhance Perl output with binary offsets
2013-06-25 04:39:21 -07:00
Tom Samstag e229e3a874 Enhance Perl output with binary offsets
This patch adds a binary offset to the generated Perl output, similar to
the Python generated code.
2013-06-23 16:05:10 -07:00
Allan Wirth c5e1bc359c Merge pull request #18 from tecknicaltom/master
Fixing offsets with execve syscall
2013-06-22 20:58:30 -07:00
Tom Samstag 966c1e2ed6 Fixing offsets with execve syscall
The shellcode generated for the Ubuntu 64b libc in Python format ends
with:
p += pack("<Q", off + 0x0000000000023950) # pop rax ; ret
p += pack("<Q", off + 0x000000000000003b) #  execve
p += pack("<Q", off + 0x0000000000001454) # syscall

Notice the offset being incorrectly added to the 3b literal for the
execve syscall. This results in nonfunctioning shell code. This patch
fixes that by:
1) Changing sc_print_addr_pop to sc_print_number_pop. The function is
only used once, and it's to print a numeric literal, not an address.
Popping a numeric literal should not add the library offset.
2) Adding a parameter to sc_print_code to dictate whether the value is
in the library and thus should be offset if a shared object.

With the patch applied, the resulting shell code for the same invocation
as above correctly ends in:
p += pack("<Q", off + 0x0000000000023950) # pop rax ; ret
p += pack("<Q", 0x000000000000003b) #  execve
p += pack("<Q", off + 0x0000000000001454) # syscall
2013-06-18 15:26:22 -07:00
Allan Wirth ed0fd13f2c Refactor some macros to ropgadget_funcs.h 2013-06-16 20:35:13 -04:00
Allan Wirth df1a1dba03 Refcator header file out into separate files. 2013-06-16 20:21:48 -04:00
Allan Wirth e7bd7b3f6e Update .gitignore for x8632 gadget gen. 2013-06-11 23:40:31 -04:00
JonathanSalwan 8e8b4d319c Update authors 2013-05-14 12:06:37 +02:00
Jonathan Salwan 14e0b85f24 Merge pull request #16 from JonathanSalwan/dev
Merge
v4.0.2
2013-05-14 03:03:59 -07:00
JonathanSalwan 040766ef25 update 2013-05-14 12:00:16 +02:00
JonathanSalwan c0578e0b7f push 4.0.2 2013-05-14 11:55:58 +02:00
JonathanSalwan 091360f6c7 upadte bug br intel 2013-05-14 11:52:30 +02:00
Jonathan Salwan a4e6cc6013 Merge pull request #14 from cao/master
Fix: bug in gadget search comparison for null characters
2013-05-02 00:10:37 -07:00
cao ec2602abf3 Fixed: comparison in gadget search for gadgets with null character 2013-05-01 22:50:17 -07:00
JonathanSalwan 1cf23892a6 See: https://github.com/JonathanSalwan/ROPgadget/issues/13 2013-04-12 10:04:03 +02:00
JonathanSalwan 568244380f Merge branch 'dev' v4.0.1 2013-04-11 10:27:05 +02:00
JonathanSalwan a260e4f9d6 genInstrX86.py: Add severals pop + ret combination 2013-04-11 10:24:43 +02:00
JonathanSalwan 97572e6e2f Update all headers 2013-04-11 09:44:08 +02:00
Allan Wirth 01bfd66fd8 Bettwer wy of doing it. 2013-02-18 14:57:36 -05:00
Allan Wirth 815e052178 Merge branch 'dev' of github.com:JonathanSalwan/ROPgadget into dev 2013-02-18 14:43:19 -05:00
Allan Wirth 4324a88419 Fix format bug on 32 bit. 2013-02-18 14:43:05 -05:00
JonathanSalwan bebb9d2ce5 Update readme 2013-02-18 17:52:44 +01:00
JonathanSalwan 549b143431 Clean syntax C. Add Intel default syntax. Update /bin/shA to /bin//sh. 2013-02-18 17:29:55 +01:00
JonathanSalwan 0269adb888 Update script python to python2. 2013-02-18 16:49:05 +01:00
Allan Wirth f0035b5c1c Remove a useless return statement in main.c 2013-02-06 13:25:35 -05:00
JonathanSalwan 2748e293b8 Merge branch 'dev' of github.com:JonathanSalwan/ROPgadget into dev 2013-02-06 12:02:00 +01:00
JonathanSalwan c41c80a484 Small modification to genInstrX86 and Makefile 2013-02-06 12:00:50 +01:00
Allan Wirth cbc11496a5 Small cleanup on makex64gadgets.py 2013-02-05 23:12:44 -05:00
Allan Wirth e76f0a971b Remove two useless undef's and make a useful function global. 2013-02-05 19:37:12 -05:00
Allan Wirth 169bc1304d Small modifications to README.md 2013-02-04 00:53:10 -05:00
Allan Wirth 8d738d78b6 Add old versions to the CHANGELOG file. 2013-02-04 00:50:51 -05:00
Allan Wirth 8a85293639 Don't generate when filtering options are specified 2013-02-04 00:41:06 -05:00
Allan Wirth 695bbe3236 Fix two uninititalized variables 2013-02-03 22:17:12 -05:00
JonathanSalwan 3e7145596e Update python3 path in script makex64gadgets.py 2013-02-02 17:44:35 +01:00