Repository navigation
The binary-exploitation release: enough that a student of a Linux pwn/RE course (such as
the nightmare course) can work end to end inside ORRESS.
Added
- Linux native debugging: the
ptraceback end (breakpoints, stepping, registers,
stack and memory) is now offered in the Debugger panel on Linux (x86-64) as well as
Windows, and ELF executables are debuggable targets. - Exploit-development toolkit (
orress-pwn): tubes that talk to a local process or a
remote TCP service (send/recvuntil/…), integer packing (p8–p64/u*), cyclic
(de Bruijn) patterns and offset recovery, a ROP gadget finder, and payload builders —
format-string writes (fmtstr), sigreturn frames (SROP),execve("/bin/sh")shellcode,
one_gadget,ret2csuandret2dlresolve. - Exploit console: a pwntools-style scripting tab (Rhai) exposing all of the above
plus symbol/GOT/PLT lookups and gadget search, run on a worker thread with live output. - Gadgets panel: list and filter the binary's ROP gadgets and copy their addresses.
- glibc heap visualizer (
orress-heap+ Heap panel): while a Linux program is stopped,
show the malloc chunks, the tcache, and (withmain_arena, auto-located from the unsorted
bin) the fastbins and unsorted/small/large bins. - CLI:
exploit(run a pwn script headless),gadgets, andone-gadgetsubcommands.
Downloads
| Platform | Archive |
|---|---|
| Windows (x86-64) | orress-*-x86_64-pc-windows-msvc.zip |
| Linux (x86-64) | orress-*-x86_64-unknown-linux-gnu.tar.gz |
| Linux (ARM64) | orress-*-aarch64-unknown-linux-gnu.tar.gz |
| macOS (Apple Silicon) | orress-*-aarch64-apple-darwin.tar.gz |
| macOS (Intel) | orress-*-x86_64-apple-darwin.tar.gz |
Each archive has a .sha256 checksum. Linux needs libxkbcommon, GTK 3 and Wayland or X11
(present on desktop distributions). The macOS builds are not notarized yet: after unpacking,
run xattr -dr com.apple.quarantine orress-* once, or right-click orress → Open. macOS
support is new — please report problems.