A Return-oriented Programming toolkit

examples/ropasaurusrex.py is a write up of ropasaurusrex in PlaidCTF 2013.

roputils.py is the single-file module, so your script can use it by creating a symlink named roputils.py in the same directory.

Currently roputils.py has the below classes:

• ELF: information about ELF object retrieved by readelf
• ROP: subclass of ELF, with additional methods for creating ROP sequence
• Shellcode: i386/x86-64/ARM shellcode builder
• FormatStr: create format string for exploitation
• Proc: gateway interface of subprocess and socket
• Pattern: create Metasploit pattern and calculate its offset
• Asm: implementation of asm subcommand

roputils.py also can be used as CLI tool, the subcommands are:

• checksec: a clone of checksec.sh
• create: call Pattern.create()
• offset: call Pattern.offset()
• gadget: availability check for tiny gadgets
• scan: grep the binary and disassemble from there
• sc: output shellcode as hexstring
• asm: i386/x86-64/ARM assembler and disassembler
• objdump: disassemble with IDA-like annotations

To list up the methods of each class, hit the below command in the same directory as roputils.py:

$ python -c 'import roputils as me; help(me)'

For more details, just read the code.