Skip to content

ORRESS v1.2.0

Latest

Choose a tag to compare

@github-actions github-actions released this 21 Oct 18:43
· 23 commits to main since this release

The binary-exploitation release: enough that a student of a Linux pwn/RE course (such as
the nightmare course) can work end to end inside ORRESS.

Added

  • Linux native debugging: the ptrace back end (breakpoints, stepping, registers,
    stack and memory) is now offered in the Debugger panel on Linux (x86-64) as well as
    Windows, and ELF executables are debuggable targets.
  • Exploit-development toolkit (orress-pwn): tubes that talk to a local process or a
    remote TCP service (send/recvuntil/…), integer packing (p8–p64/u*), cyclic
    (de Bruijn) patterns and offset recovery, a ROP gadget finder, and payload builders —
    format-string writes (fmtstr), sigreturn frames (SROP), execve("/bin/sh") shellcode,
    one_gadget, ret2csu and ret2dlresolve.
  • Exploit console: a pwntools-style scripting tab (Rhai) exposing all of the above
    plus symbol/GOT/PLT lookups and gadget search, run on a worker thread with live output.
  • Gadgets panel: list and filter the binary's ROP gadgets and copy their addresses.
  • glibc heap visualizer (orress-heap + Heap panel): while a Linux program is stopped,
    show the malloc chunks, the tcache, and (with main_arena, auto-located from the unsorted
    bin) the fastbins and unsorted/small/large bins.
  • CLI: exploit (run a pwn script headless), gadgets, and one-gadget subcommands.

Downloads

Platform Archive
Windows (x86-64) orress-*-x86_64-pc-windows-msvc.zip
Linux (x86-64) orress-*-x86_64-unknown-linux-gnu.tar.gz
Linux (ARM64) orress-*-aarch64-unknown-linux-gnu.tar.gz
macOS (Apple Silicon) orress-*-aarch64-apple-darwin.tar.gz
macOS (Intel) orress-*-x86_64-apple-darwin.tar.gz

Each archive has a .sha256 checksum. Linux needs libxkbcommon, GTK 3 and Wayland or X11
(present on desktop distributions). The macOS builds are not notarized yet: after unpacking,
run xattr -dr com.apple.quarantine orress-* once, or right-click orress → Open. macOS
support is new — please report problems.