full-disclosure - Backward disassembler for ROP exploitation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Tue, 28 Sep 2010 21:17:21 +0300
From: Adrian Furtuna <adif2k8@...il.com>
To: pen-test@...urityfocus.com
Cc: full-disclosure@...ts.grok.org.uk
Subject: Backward disassembler for ROP exploitation

Dear all,

I want to share with you a tool that I wrote for helping me find
gadgets useful in ROP exploits.

bdasm is a PyCommand for Immunity Debugger (v 1.73) which can search
the address space of a process for a certain opcode/instruction and
disassemble backward and forward for a  specified number of
instructions.

You can find more details for usage and examples here:
http://stormsecurity.wordpress.com/2010/09/17/backward-disassembler-for-rop-exploitation/

If you find it useful or have any questions please drop me a comment.

Regards,
Adrian

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/