Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 3 Mar 2020 12:11:43 +1100
From:      Kubilay Kocak <koobs@FreeBSD.org>
To:        Mateusz Piotrowski <0mp@FreeBSD.org>, ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org
Subject:   Re: svn commit: r527637 - in head/security: . py-ropper
Message-ID:  <680cb596-9433-2f7f-8dfc-f75b27ed8d2b@FreeBSD.org>
In-Reply-To: <202003021437.022Ebdd7054697@repo.freebsd.org>
References:  <202003021437.022Ebdd7054697@repo.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 3/03/2020 1:37 am, Mateusz Piotrowski wrote:
> Author: 0mp
> Date: Mon Mar  2 14:37:39 2020
> New Revision: 527637
> URL: https://svnweb.freebsd.org/changeset/ports/527637
> 
> Log:
>    New port: security/py-ropper
>    
>    You can use ropper to look at information about files in different
>    file formats and you can find ROP and JOP gadgets to build chains for
>    different architectures. Ropper supports ELF, MachO and the PE file
>    format. Other files can be opened in RAW format. The following
>    architectures are supported:
>    
>    - x86 / x86_64
>    - Mips / Mips64
>    - ARM (also Thumb Mode)/ ARM64
>    - PowerPC / PowerPC64
>    
>    Ropper is inspired by ROPgadget, but should be more than a gadgets
>    finder. So it is possible to show information about a binary like
>    header, segments, sections etc. Furthermore it is possible to edit the
>    binaries and edit the header fields, but currently this is not fully
>    implemented and in a experimental state. For disassembly ropper uses
>    the awesome Capstone Framework.
>    
>    Now you can generate rop chain automatically (auto-roper) for execve
>    and mprotect syscall.
>    
>    WWW: https://scoding.de/ropper/
> 
> Added:
>    head/security/py-ropper/
>    head/security/py-ropper/Makefile   (contents, props changed)
>    head/security/py-ropper/distinfo   (contents, props changed)
>    head/security/py-ropper/pkg-descr   (contents, props changed)
> Modified:
>    head/security/Makefile
> 
> Modified: head/security/Makefile
> ==============================================================================
> --- head/security/Makefile	Mon Mar  2 14:30:42 2020	(r527636)
> +++ head/security/Makefile	Mon Mar  2 14:37:39 2020	(r527637)
> @@ -969,6 +969,7 @@
>       SUBDIR += py-rekall_lib
>       SUBDIR += py-requests-credssp
>       SUBDIR += py-requests-kerberos
> +    SUBDIR += py-ropper
>       SUBDIR += py-rsa
>       SUBDIR += py-safe
>       SUBDIR += py-scp
> 
> Added: head/security/py-ropper/Makefile
> ==============================================================================
> --- /dev/null	00:00:00 1970	(empty, because file is newly added)
> +++ head/security/py-ropper/Makefile	Mon Mar  2 14:37:39 2020	(r527637)
> @@ -0,0 +1,24 @@
> +# $FreeBSD$
> +
> +PORTNAME=	ropper
> +DISTVERSION=	1.13.3
> +CATEGORIES=	security python
> +MASTER_SITES=	CHEESESHOP
> +PKGNAMEPREFIX=	${PYTHON_PKGNAMEPREFIX}
> +
> +MAINTAINER=	0mp@FreeBSD.org
> +COMMENT=	Find gadgets to build rop chains for different architectures
> +
> +LICENSE=	BSD3CLAUSE
> +# LICENSE_FILE is not distributed with the Python package.
> +
> +RUN_DEPENDS=	${PYTHON_PKGNAMEPREFIX}capstone>=4.0.1:devel/py-capstone@${PY_FLAVOR} \
> +		${PYTHON_PKGNAMEPREFIX}filebytes>=0.10.0:devel/py-filebytes@${PY_FLAVOR} \
> +		${PYTHON_PKGNAMEPREFIX}keystone-engine>=0.9.1.3:devel/py-keystone-engine@${PY_FLAVOR}
> +
> +USES=		python
> +USE_PYTHON=	autoplist distutils

Package provides a console_script, port must be concurrent version 
installation safe (use USE_PYTHON=concurrent)

[1] entry_points={'console_scripts': ['ropper = ropper.__main__:main']},

> +
> +NO_ARCH=	yes
> +
> +.include <bsd.port.mk>
> 
> Added: head/security/py-ropper/distinfo
> ==============================================================================
> --- /dev/null	00:00:00 1970	(empty, because file is newly added)
> +++ head/security/py-ropper/distinfo	Mon Mar  2 14:37:39 2020	(r527637)
> @@ -0,0 +1,3 @@
> +TIMESTAMP = 1582056034
> +SHA256 (ropper-1.13.3.tar.gz) = dfc87477c0f53d3d2836a384c106373d761cc435eafc477f299523e5404dda43
> +SIZE (ropper-1.13.3.tar.gz) = 68927
> 
> Added: head/security/py-ropper/pkg-descr
> ==============================================================================
> --- /dev/null	00:00:00 1970	(empty, because file is newly added)
> +++ head/security/py-ropper/pkg-descr	Mon Mar  2 14:37:39 2020	(r527637)
> @@ -0,0 +1,22 @@
> +You can use ropper to look at information about files in different
> +file formats and you can find ROP and JOP gadgets to build chains for
> +different architectures. Ropper supports ELF, MachO and the PE file
> +format. Other files can be opened in RAW format. The following
> +architectures are supported:
> +
> +- x86 / x86_64
> +- Mips / Mips64
> +- ARM (also Thumb Mode)/ ARM64
> +- PowerPC / PowerPC64
> +
> +Ropper is inspired by ROPgadget, but should be more than a gadgets
> +finder. So it is possible to show information about a binary like
> +header, segments, sections etc. Furthermore it is possible to edit the
> +binaries and edit the header fields, but currently this is not fully
> +implemented and in a experimental state. For disassembly ropper uses
> +the awesome Capstone Framework.
> +
> +Now you can generate rop chain automatically (auto-roper) for execve
> +and mprotect syscall.
> +
> +WWW: https://scoding.de/ropper/
> 




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?680cb596-9433-2f7f-8dfc-f75b27ed8d2b>