Bulk ROP gadget extraction and mutation tool for Windows PE binaries. Point it at a folder of DLLs/EXEs, extract all ROP gadgets using librp (rp++ static library), and output them in standard rp++ format.
Optionally discover additional gadgets through instruction misalignment mutation — a technique that exploits x86/x64 variable-length encoding by disassembling at negative byte offsets from known gadget addresses.
Requires:
- MSVC toolchain
- vcbuild (included as submodule at
vcbuild/) - librp static library (expected at
../librp/build-${ARCH}/Release/librp.lib) - WTL 10 headers (expected at
../vcbuild/gui/external/Include/)
git submodule update --init
python vcbuild/vcbuild.py