rp++ as a Windbg Extension: a fast ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries

Overview

rp++ or rp is a C++ ROP gadget finder for PE/ELF/Mach-O executables and x86/x64/ARM/ARM64 architectures.

Build

You can find build scripts in src/build for every supported platforms; below is a example for Windows - Microsoft Visual Studio:

C:\Users\tahai\code\rp4windbg\src\build> .\build-release-msvc.bat

C:\Users\tahai\code\rp4windbg\src\build>cmake ..
-- Selecting Windows SDK version 10.0.22621.0 to target Windows 10.0.19045.
-- Configuring done
-- Generating done
-- Build files have been written to: C:/Users/tahai/Code/rp4windbg/src/build

C:\Users\tahai\code\rp4windbg\src\build>cmake --build . --config RelWithDebInfo
MSBuild version 17.5.1+f6fdcf537 for .NET Framework
[...]
rp-win.vcxproj -> C:\Users\tahai\Code\rp4windbg\src\build\RelWithDebInfo\rp-win.dll

Make sure that all submodules have been pulled before running the build process:

git submodule update --init --recursive

Authors

• Axel '0vercl0k' Souchet
• Taha Draidia tahadraidia (Ported rp++ to WindDBG)