rop-chain

Auto-chaining ROP exploit builder for x86-64 ELF (Rust)

A tool to search for gadgets, operations, and ROP chains using a backtracking algorithm in a tree-like structure

Finding and classifying ROP gadgets from rp++ output file with some regex and a CLI. Built during an OffSec journey, primarily for the EXP-301 and EXP-401 courses.

rop_search.py searches rp++ gadget output for gadgets that contain ordered instruction, register, or value fragments.

A full-chain 64-bit Linux exploit chaining a Format String leak and Buffer Overflow to bypass ASLR, PIE, NX, and Canaries for SUID privilege escalation.

A blazing fast™ multithreaded ROP Gadget finder. ropper / ropgadget alternative (currently x86 only)

Automatic ROPChain Generation

HTB machine "Retired" - dotnet exploit script

ROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Syscalls attack, a novel Heaven's Gate, and "shellcodeless" ROP. The framework utilizes emulation and obfuscation to help expand the attack surface.

Exploit for stack-based buffer overflow found in the conn-indicator binary in the TP-Link Archer AX50 router

rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.

CTF challenges taken during the course of "Offensive & Defensive Cybersecurity" - Polimi Computer Science Engineering - A.Y. 2024/2025.

A sandbox container with common reverse-engineering/debugging tools

A Python tool to generate ROP chains

Rop Emporium - Exploits and brief Walkthroughs

Bluefrost Exploitation Challenge 2019 - Exploit and Writeup

Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)

All ROPemporium binaries categorized by architecture, with solving scripts and custom flags

ROP Benchmark is a tool to compare ROP compilers

ROPium is a tool that helps you building ROP exploits by finding and chaining gadgets together