Skip to content
  1. Sep 09, 2016
  2. Sep 08, 2016
  3. Aug 31, 2016
  4. Aug 29, 2016
  5. Aug 28, 2016
    • Dobin Rutishauser's avatar
      can specify fill_byte for function write_to_memory · 0388df67
      Dobin Rutishauser authored
      If the string given to write_to_memory is not a multiple of 4 (or 8?), it will need to be padded by a fill byte. The fill byte was set to 0xff. This commit makes it possible to give the fill byte as an argument.
      
      E.g. useful if we want to write bash strings, and fill it with spaces or hashtags.
      0388df67
  6. Aug 27, 2016
    • Dobin Rutishauser's avatar
      ROP addresses can get filtered for bad bytes/chars. · a6e35130
      Dobin Rutishauser authored
      If the user does not want that the shellcode contains certain bytes (e.g. newlines, 0x0 etc), he can now define it in the rop object with the set_badbytes function.
      
      rop.load_gadgets("gadgets")
      rop.set_badbytes([0x01, 0xf9, 0x93, 0x95, 0x96, 0x40])
      chain = rop.write_to_mem(0x11223344, "abcdefgh")
      
      functions which filter badbytes:
      write_to_mem
      add_to_mem
      write_to_mem_v2
      func_call
      _get_single_ret
      _find_reg_setting_gadgets
      _filter_reg_setting_gadgets
      _get_sufficient_partial_controllers
      a6e35130
  7. Aug 09, 2016
  8. Aug 07, 2016
  9. Jul 13, 2016
  10. Jul 03, 2016
  11. Jun 30, 2016
  12. Jun 29, 2016
  13. Jun 28, 2016
  14. Jun 26, 2016
  15. Jun 23, 2016
  16. Jun 22, 2016
  17. Jun 19, 2016
  18. Jun 15, 2016
  19. Jun 04, 2016
  20. Jun 02, 2016
  21. May 12, 2016
  22. May 04, 2016
  23. Mar 09, 2016
  24. Mar 05, 2016