search

sashs / Ropper

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.
https://scoding.de/ropper
BSD 3-Clause "New" or "Revised" License
1.88k stars 206 forks source link

ValueError: ('aba885b34ffe9781f44af295bd9e6cfa6754e83fe07e628b3a0b04eae3b79f56', 'LOAD') is not in list #120

Open Techno-Fox opened 4 years ago

Techno-Fox commented 4 years ago

The command :

ropper --chain="execve" --badbytes 000a0d --file ./heap0_static

The error :

Traceback (most recent call last): File "/usr/lib/python3/dist-packages/ropper/ropchain/arch/ropchainx86_64.py", line 711, in create chain_tmp += self._createSyscall()[0] File "/usr/lib/python3/dist-packages/ropper/ropchain/arch/ropchainx86_64.py", line 598, in _createSyscall raise RopChainError('Cannot build syscall gadget!') ropper.common.error.RopChainError: Cannot build syscall gadget!

During handling of the above exception, another exception occurred:

Traceback (most recent call last): File "/usr/lib/python3/dist-packages/ropper/console.py", line 360, in generateChain chain = self.rs.createRopChain(generator, str(self.currentFile.arch) ,options) File "/usr/lib/python3/dist-packages/ropper/service.py", line 775, in createRopChain return generator.create(options) File "/usr/lib/python3/dist-packages/ropper/ropchain/arch/ropchainx86_64.py", line 719, in create chain_tmp += self._createOpcode('0f05') File "/usr/lib/python3/dist-packages/ropper/ropchain/arch/ropchainx86_64.py", line 609, in _createOpcode return self._printRopInstruction(gadget) File "/usr/lib/python3/dist-packages/ropper/ropchain/arch/ropchainx86_64.py", line 176, in printRopInstruction toReturn = ('rop += rebase%d(%s) # %s\n' % (self._usedBinaries.index((gadget.fileName, gadget.section)),toHex(gadget.lines[0][0],8), gadget.simpleString())) ValueError: ('aba885b34ffe9781f44af295bd9e6cfa6754e83fe07e628b3a0b04eae3b79f56', 'LOAD') is not in list

[ERROR] Please report this error on https://github.com/sashs/ropper [ERROR] Traceback (most recent call last): File "/usr/lib/python3/dist-packages/ropper/ropchain/arch/ropchainx86_64.py", line 711, in create chain_tmp += self._createSyscall()[0] File "/usr/lib/python3/dist-packages/ropper/ropchain/arch/ropchainx86_64.py", line 598, in _createSyscall raise RopChainError('Cannot build syscall gadget!') ropper.common.error.RopChainError: Cannot build syscall gadget!

During handling of the above exception, another exception occurred:

Traceback (most recent call last): File "/usr/lib/python3/dist-packages/ropper/console.py", line 62, in cmd func(self, text) File "/usr/lib/python3/dist-packages/ropper/console.py", line 499, in handleOptions self.generateChain(options.chain) File "/usr/lib/python3/dist-packages/ropper/console.py", line 377, in generateChain raise e File "/usr/lib/python3/dist-packages/ropper/console.py", line 360, in generateChain chain = self.__rs.createRopChain(generator, str(self.currentFile.arch) ,options) File "/usr/lib/python3/dist-packages/ropper/service.py", line 775, in createRopChain return generator.create(options) File "/usr/lib/python3/dist-packages/ropper/ropchain/arch/ropchainx86_64.py", line 719, in create chain_tmp += self._createOpcode('0f05') File "/usr/lib/python3/dist-packages/ropper/ropchain/arch/ropchainx86_64.py", line 609, in _createOpcode return self._printRopInstruction(gadget) File "/usr/lib/python3/dist-packages/ropper/ropchain/arch/ropchainx86_64.py", line 176, in printRopInstruction toReturn = ('rop += rebase%d(%s) # %s\n' % (self._usedBinaries.index((gadget.fileName, gadget.section)),toHex(gadget.lines[0][0],8), gadget.simpleString())) ValueError: ('aba885b34ffe9781f44af295bd9e6cfa6754e83fe07e628b3a0b04eae3b79f56', 'LOAD') is not in list

sashs commented 4 years ago

Could you provide the binary, please?

Techno-Fox commented 4 years ago

Yes, however, I would need to find my USB. I will try to have it to you tomorrow.

Techno-Fox commented 4 years ago

Hey I got. School got in the way. heap0_static.zip

sashs commented 4 years ago

Hey, sorry for the very long delay . I cannot reproduce this issue