Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ROP "describe" should use argument names from functions.py #1914

Open
heapcrash opened this issue Jun 7, 2021 · 0 comments
Open

ROP "describe" should use argument names from functions.py #1914

heapcrash opened this issue Jun 7, 2021 · 0 comments
Labels
feature rop Return Oriented Programming manipulation routines

Comments

@heapcrash
Copy link
Collaborator

Currently, when calling e.g. rop.system("/bin/sh") and doing rop.dump() we might print out the address of /bin/sh with e.g. arg0 as the "description" for that ROP slot.

It would be useful if, when doing rop.call, we look up the function in @zachriggle's functions.py (https://github.com/zachriggle/functions/blob/master/functions.py) and use the argument name from there.

Since this is a huge file, it should be lazily-loaded.

In this case, it has a line:

 'system': Function(type='int', derefcnt=0, name='system', args=[Argument(type='char', derefcnt=1, name='command')]),

So we would be able to use char* command instead of arg0.

@Arusekk Arusekk added the rop Return Oriented Programming manipulation routines label Sep 16, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature rop Return Oriented Programming manipulation routines
Projects
None yet
Development

No branches or pull requests

2 participants