ROPgadget | tool lets you search your gadgets on your binaries | Hacking library

by JonathanSalwan Python Version: 7.4 License: Non-SPDX

X-Ray Key Features Code Snippets(3)Community Discussions(1)Vulnerabilities Install Support

kandi X-RAY | ROPgadget Summary

ROPgadget is a Python library typically used in Security, Hacking applications. ROPgadget has no bugs, it has no vulnerabilities, it has build file available and it has medium support. However ROPgadget has a Non-SPDX License. You can install using 'pip install ROPgadget' or download it from GitHub, PyPI.

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

Support

Quality

Security

License

Reuse

Support

ROPgadget has a medium active ecosystem.

It has 3384 star(s) with 554 fork(s). There are 121 watchers for this library.

It had no major release in the last 12 months.

There are 7 open issues and 84 have been closed. On average issues are closed in 638 days. There are 1 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of ROPgadget is 7.4

Quality

ROPgadget has 0 bugs and 0 code smells.

Security

ROPgadget has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

ROPgadget code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

ROPgadget has a Non-SPDX License.

Non-SPDX licenses can be open source with a non SPDX compliant license, or non open source licenses, and you need to review them closely before use.

Reuse

ROPgadget releases are available to install and integrate.

Deployable package is available in PyPI.

Build file is available. You can build the component from source.

Installation instructions are not available. Examples and code snippets are available.

ROPgadget saves you 1015 person hours of effort in developing the same functionality from scratch.

It has 2357 lines of code, 154 functions and 22 files.

It has medium code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi has reviewed ROPgadget and discovered the below as its top functions. This is intended to give you an instant insight into ROPgadget implemented functionality, and help decide if they suit your requirements.

Add JOP gadget to the specified section .
Parse the command line arguments .
Generate the chain generation
Search for MPSgads .
Reassign options for restr
Sets the shdr data .
Handle ROP chain version
Checks if the current version is available .
Returns the arch of the raw data
Set load command .

Get all kandi verified functions for this library.

ROPgadget Key Features

No Key Features are available at this moment for ROPgadget.

ROPgadget Examples and Code Snippets

vagrant_pwn

Shell

Lines of Code : 3

License : No License

Copy

git clone https://github.com/dariosharp/vagrant_pwn
vagrant up
vagrant ssh

Gadget guessing

Python

Lines of Code : 1

License : Permissive (BSD-2-Clause)

Copy

$ pip install -r guessing/requirements.txt

Installing pwntools on macOS

Python

Lines of Code : 6

License : Strong Copyleft (CC BY-SA 4.0)

Copy

$ MACOS_UNIVERSAL=no pip install capstone

    $ pip install "git+https://github.com/aquynh/capstone.git#egg=capstone&subdirectory=bindings/python"

$ MACOS_UNIVERSAL=no pip install pwnto

Community Discussions

Trending Discussions on ROPgadget

Simple ROP chain with 2 arguments to the function

QUESTION

Simple ROP chain with 2 arguments to the function

Asked 2020-May-24 at 13:38

I'm practicing with ROPchain and I have a very simple program, where I'm unable to call the 'vulnerable' function successfully:

...

ANSWER

Answered 2020-May-24 at 13:38

You have a position independent executable, this means that addresses will change at runtime every time. You want an executable that is not PIE, compile with -no-pie -fno-pie, and then get the addresses you want again from the debugger or just with objdump.

Source https://stackoverflow.com/questions/61985401

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install ROPgadget

You can install using 'pip install ROPgadget' or download it from GitHub, PyPI.
You can use ROPgadget like any standard Python library. You will need to make sure that you have a development environment consisting of a Python distribution including header files, a compiler, pip, and git installed. Make sure that your pip, setuptools, and wheel are up to date. When using pip it is generally recommended to install packages in a virtual environment to avoid changes to the system.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: