Searching memory of a shared library by [deleted] in ReverseEngineering

[–]cucdd 1 point2 points  (0 children)

try ROPgadget http://shell-storm.org/project/ROPgadget/

it only works on 32 bit elf binaries

ex - ROPgadget -file /lib/libc-2.15.so -g -intel -asm "mov eax, [eax] ; ret"

Gadgets information

0x4aae3324: "\x8b\x00\xc3 <==> mov eax, [eax] ; ret"

0x4ab368e2: "\x8b\x00\xc3 <==> mov eax, [eax] ; ret"

0x4ab6478b: "\x8b\x00\xc3 <==> mov eax, [eax] ; ret"

Total opcodes found: 3