search

Boyan-MILANOV / ropium

ROPium is a tool that helps you building ROP exploits by finding and chaining gadgets together
350 stars 40 forks source link

hang on bad bytes #31

Closed Kyle-Kyle closed 3 years ago

Kyle-Kyle commented 4 years ago

by doing

(ropium)> badbytes 115
(ropium)> find rax = 0x68732f6e69622f

ropium hangs. The target binary is the libc from ubuntu 18.04

Kyle-Kyle commented 4 years ago

This should be able to be done through xor. Probably ropium doesn't have the ability to do xor?

Boyan-MILANOV commented 3 years ago

Hey!

It is indeed planned to add some compiling rules enabling to set registers by also using arithmetic and logic operations (ADD,SUB,XOR,AND,OR,...). I'll try to work on that ASAP in parallel with Aarch64 support :)

ROPium hangs on the query because it can't find a suitable ropchain. I just added a feature to enable users to use Ctrl-C to stop the search when it takes too long ;)