salmanyam/jitrop-native

The project collects the gadgets and records the time to obtain gadgets from a process by utilizing an attack technique called Just-In-Time Return-Oriented Programming (JIT-ROP). We utilize the JIT-ROP technique to evaluate different fine-grained address space layout randomization (ASLR) schemes and measure the upper bound of effective re-randomization intervals. Our evaluation and measurements have been published in ACM CCS 2020. We implement a native version of the JIT-ROP technique.

jitrop-native's Issues

can this tool attack a program?

This tool can find some gadgets, but after that?How can I use those gadgets to attack a program(I create it by myself). In other words, how can I prove that it was attacked? I need many attacked program samples, and I want to use JIT-ROP to attack them so that I don't need to attack evey program by hand.