235 Commits

Author SHA1 Message Date
JonathanSalwan d92b2b0a8c Fix date v5.1 2014-04-21 13:55:02 +01:00
JonathanSalwan 1000310974 Bug fix: Aligning Instruction 2014-04-21 13:43:09 +01:00
JonathanSalwan c65ed7d607 Add system gadget for MIPS arch 2014-04-20 15:33:15 +01:00
JonathanSalwan 0a488b426b Delete 1 example line. --payload not yet implemented. Thanks nk for this typo 2014-04-20 14:57:41 +01:00
JonathanSalwan baca914ad8 delete .gitignore file 2014-04-20 14:35:13 +01:00
JonathanSalwan 8a5f96bdf9 Update readme about todo 2014-04-20 14:34:14 +01:00
JonathanSalwan 79a8ee75c2 Fix JOP PPC 2014-04-20 14:32:57 +01:00
JonathanSalwan c8c75fe852 Update readme about the --badbytes option 2014-04-20 14:23:05 +01:00
JonathanSalwan 32551c9359 Add the --badbytes option 2014-04-20 14:19:46 +01:00
JonathanSalwan 3016e908fb Add cross-compile information 2014-04-18 13:14:38 +01:00
JonathanSalwan af822e0190 Fix 2014-04-18 10:33:33 +01:00
JonathanSalwan 80d39fce99 Fix typo Capstone 2014-04-18 10:26:56 +01:00
Jonathan Salwan 8428710987 Merge pull request #32 from aquynh/patch-1
Update README.md
2014-04-18 09:37:08 +01:00
Nguyen Anh Quynh fc253ef12e Update README.md
Capitalize Capstone's name :-)
2014-04-18 16:09:44 +08:00
Jonathan Salwan eb137bb802 Merge pull request #31 from JonathanSalwan/dev
Fix date
2014-04-18 00:32:28 +01:00
JonathanSalwan 9a73faa023 Fix date 2014-04-18 00:31:22 +01:00
Jonathan Salwan 86928f8c5d Merge pull request #30 from JonathanSalwan/dev
fix recursive
2014-04-18 00:25:06 +01:00
JonathanSalwan 961f825461 fix recursive 2014-04-17 23:25:53 +01:00
JonathanSalwan 64ddf74bd6 Merge branch 'master' of github.com:JonathanSalwan/ROPgadget 2014-04-17 23:23:00 +01:00
JonathanSalwan c64e6d2d90 fix recursive 2 2014-04-17 23:22:18 +01:00
JonathanSalwan 1a15e9c980 fix git recur 2014-04-17 23:21:18 +01:00
Jonathan Salwan 95a5f4790f Merge pull request #28 from JonathanSalwan/dev
fix readme
2014-04-17 23:03:03 +01:00
JonathanSalwan 808299a44e fix readme 2014-04-17 23:01:12 +01:00
Jonathan Salwan 98e06b910c Merge pull request #27 from JonathanSalwan/dev
Dev
v5.0
2014-04-17 22:49:09 +01:00
JonathanSalwan a8d649ffd4 Clean files 2014-04-17 22:33:25 +01:00
JonathanSalwan 73b06240ea Push ROPgadget v5 2014-04-17 22:30:52 +01:00
JonathanSalwan d678554850 update sync authors and readme 2014-02-13 16:19:49 +00:00
Dennis Semakin 8fb4ce3e72 Bug fix - shdr segfault parsing. 2014-02-12 22:57:56 +00:00
Jonathan Salwan 407b1fd962 Merge pull request #25 from JonathanSalwan/dev
Push 4.0.3 in master
2013-10-19 04:32:29 -07:00
JonathanSalwan 7acfb7ca3a push 4.0.3 2013-10-19 12:29:21 +01:00
Jonathan Salwan 6e272226f9 Merge pull request #24 from dark-rose/dev
Made searching for gadgets faster
2013-10-19 04:24:27 -07:00
Robin Stenvi 9dffa376b9 Added check to short circuit the outer loop as well 2013-10-19 04:49:44 +02:00
Robin Stenvi 1ef11af48f Implemented comments from allanlw 2013-10-19 03:13:38 +02:00
Robin Stenvi ec933cc86a Added check for malloc error 2013-10-18 15:45:10 +02:00
Robin Stenvi fd17784f36 Added filtering functionality, so that searching for gadgets is faster. 2013-10-18 00:26:30 +02:00
Jonathan Salwan 8ab7808d6f Update README.md
Type fix
2013-08-21 20:09:32 +02:00
JonathanSalwan 1be2a653d0 Fix compatibility python - cf https://twitter.com/roman_soft/status/359464332314152960 2013-07-23 12:18:56 +00:00
Jonathan Salwan e723595120 Merge pull request #21 from JonathanSalwan/master
Fix compatibility python - cf https://twitter.com/roman_soft/status/3594...
2013-07-23 03:21:47 -07:00
JonathanSalwan 9546acf253 merge 2013-06-25 13:54:18 +02:00
Jonathan Salwan b9fa6c5135 Merge pull request #19 from tecknicaltom/master
Enhance Perl output with binary offsets
2013-06-25 04:39:21 -07:00
Tom Samstag e229e3a874 Enhance Perl output with binary offsets
This patch adds a binary offset to the generated Perl output, similar to
the Python generated code.
2013-06-23 16:05:10 -07:00
Allan Wirth c5e1bc359c Merge pull request #18 from tecknicaltom/master
Fixing offsets with execve syscall
2013-06-22 20:58:30 -07:00
Tom Samstag 966c1e2ed6 Fixing offsets with execve syscall
The shellcode generated for the Ubuntu 64b libc in Python format ends
with:
p += pack("<Q", off + 0x0000000000023950) # pop rax ; ret
p += pack("<Q", off + 0x000000000000003b) #  execve
p += pack("<Q", off + 0x0000000000001454) # syscall

Notice the offset being incorrectly added to the 3b literal for the
execve syscall. This results in nonfunctioning shell code. This patch
fixes that by:
1) Changing sc_print_addr_pop to sc_print_number_pop. The function is
only used once, and it's to print a numeric literal, not an address.
Popping a numeric literal should not add the library offset.
2) Adding a parameter to sc_print_code to dictate whether the value is
in the library and thus should be offset if a shared object.

With the patch applied, the resulting shell code for the same invocation
as above correctly ends in:
p += pack("<Q", off + 0x0000000000023950) # pop rax ; ret
p += pack("<Q", 0x000000000000003b) #  execve
p += pack("<Q", off + 0x0000000000001454) # syscall
2013-06-18 15:26:22 -07:00
Allan Wirth ed0fd13f2c Refactor some macros to ropgadget_funcs.h 2013-06-16 20:35:13 -04:00
Allan Wirth df1a1dba03 Refcator header file out into separate files. 2013-06-16 20:21:48 -04:00
Allan Wirth e7bd7b3f6e Update .gitignore for x8632 gadget gen. 2013-06-11 23:40:31 -04:00
JonathanSalwan 8e8b4d319c Update authors 2013-05-14 12:06:37 +02:00
Jonathan Salwan 14e0b85f24 Merge pull request #16 from JonathanSalwan/dev
Merge
v4.0.2
2013-05-14 03:03:59 -07:00
JonathanSalwan 040766ef25 update 2013-05-14 12:00:16 +02:00
JonathanSalwan c0578e0b7f push 4.0.2 2013-05-14 11:55:58 +02:00