Sascha Schirra comments

Results 39 comments of


                                            Sascha Schirra

Enhancement: Memory scanning, core dump parsing

Since coredumps are ELF files, it is possible to load those files with ropper without using the `--raw` option. However the Windows dump format is different. In order to use...

stack_pivot enhancement

Regarding your first point, I have implemented that today, shortly before you posted this issue. :)

Enhancement: Windows color support

Thx, I know. I tried to have just a view dependencies. At the moment you just have to install capstone and filebytes to get ropper work. However, I have an...

AVR Support

Hi. I will look at it.

Error trying to get some gadgets on libc

Hi, could you share the binary, please?

Cannot Find some Gadgets because of disassemble error !

Hey. Apologize the delay, can you provide the binary?

High memory use, possible leak when reading a MachO file

Hi, many thanks. I assume the reason is that I tried to make things easier accessible, e.g. Strings. Therefore, they get copied at some places. I will look at that.

eclean-kernel -n 3 removed all kernels but current one

Hi, eclean-kernel still does not recognize how many kernels to leave. The currently running kernel is 4.20.3. I updated the kernel to 4.20.4, but didn't reboot the system. eclean-kernel only...

Ropper is not compatible with ppc

Why do you think that?

Fix execve syscall code in ropchain generator

Are you sure, that this fix the issue? The changes shows only a change in the message