This repository contains the code for Dynamic Forensic Techniques for Rebuilding Code Reuse Attacks Payload.
For the full details, please refer to the following(paper).
./Pintool.cpp
: for binary instrumentation of the program file./ROP-Reconstructor.py
: to automate the reconstruction of the payload
export PIN_ROOT=./pintool/pin
make obj-intel64/PinTool.so
${PIN_ROOT}/pin -t obj-intel64/PinTool.so -o <output> -- <program>
python ROP-Reconstructor.py -r <path to ROPGadget output> -f <objdump output> -i <Pintool output>