ROPgadget - This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation

•    Python

---

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF/PE/Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures. Since the version 5, ROPgadget has a new core which is written in Python using Capstone disassembly framework for the gadgets search engine - The older version can be found in the Archives directory but it will not be maintained. If you want to use ROPgadget, you have to install Capstone first.

reverse-engineering rop rop-exploitation rop-gadgets binary-exploitation

EnVisen - ROP gadget finder and analysis in pure Javascript

•    Javascript

---

⚠️ This tool may only be used for educational, teaching, learning, understanding and research purposes only. Completely self-contained binary ROP/JOP gadget analyzer for comparing two binaries side-by-side and understanding their structures, in 100% pure Javascript, and a self-contained client-side browser application. Focussed on extreme simplicity of usage and portability across platforms.

elf macho rop-gadgets rop-exploitation rop-chain disassembly cybersecurity elf-parser elf-loader macho-parser portable-executable x86 arm arm64 aslr-bypass control-flow binary-analysis

idarop - ROP database plugin for IDA

•    Python

---

Idarop is an IDA plugin which list and store all the ROP gadgets presents within the opened binary. The codebase is vastly copied from the unmaintained IDA plugin idaploiter. However idasploiter is built to work at runtime (lifting IDA debugger API), whereas idarop is aimed for a more static approach. Using IDA to view gadgets allows the user to take advantage of the "advanced" list filtering IDA provides : in the following picture, only gadgets having a 0xff opcode and less than 4 bytes are shown (and the ones touching esp are highlighted).

ida ida-plugin rop-gadgets database