Skip to content

Show and allow search ROP gadgets by categories #5394

@notxvilka

Description

@notxvilka

There are many different categories of ROP gadgets, that might become useful for different scenarios.

The very minimum would be determined by how it's return:

  • POP (PC)
  • JUMP (BRANCH) REG - unconditional
  • JUMP COND (BRANCH) REG - conditional
  • JUMP (BRANCH) ADDR

Also, it would make sense to separate gadgets by stack modification - e.g. changing the SP pointer

Gadgets that access memory also should have a separate category.

See the table from Classification of ROP gadgets A. V. Vishnyakov paper:
Image

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    Status

    No status

    Status

    To Do

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions