ROP-Reconstructor

This repository contains the code for Dynamic Forensic Techniques for Rebuilding Code Reuse Attacks Payload.

For the full details, please refer to the following(paper).

Relevant Files

./Pintool.cpp: for binary instrumentation of the program file
./ROP-Reconstructor.py: to automate the reconstruction of the payload

How to run

Export PIN_ROOT environment variable

export PIN_ROOT=./pintool/pin

Build tool inside source directory

make obj-intel64/PinTool.so

Run tool on executable

${PIN_ROOT}/pin -t obj-intel64/PinTool.so -o <output> -- <program>

ROP-Reconstructor

python ROP-Reconstructor.py -r <path to ROPGadget output> -f <objdump output> -i <Pintool output>

About

Languages

Language:C 39.2%Language:C++ 36.0%Language:HTML 19.7%Language:Assembly 2.1%Language:Perl 1.5%Language:JavaScript 0.6%Language:CSS 0.3%Language:Python 0.3%Language:Makefile 0.1%Language:Shell 0.1%Language:Batchfile 0.0%Language:GDB 0.0%