다운로드 : https://github.com/0vercl0k/rp/downloads
0vercl0k/rp
rp++ is a full-cpp written tool that aims to find ROP sequences in PE/Elf/Mach-O x86/x64 binaries. It is open-source and has been tested on several OS: Debian / Windows 8.1 / Mac OSX Lion (10.7.3)....
github.com
다운로드 파일을 /usr/local/bin 으로 복사
- 사용 방법
./rp++ [-hv] [-f <binary path>] [-i <1,2,3>] [-r <positive int>] [--raw=<archi>]
[--atsyntax] [--unique] [--search-hexa=<\x90A\x90>] [--search-int=<int in hex>]
ex)
rp-lin-x64 -f /lib/x86_64-linux-gnu/libc-2.23.so -r 1|grep "pop rdi ; jmp rax"