Binary Exploitation
Tools used to develop and analyze binary exploits, find ROP and JOP gadgets, verify compiler mitigations like ASLR, NX, and stack canaries, and test memory safety protections.
Software in Binary Exploitation
7 toolsNo tools in this category match the selected filters.
| Tool | License | Platforms | Pricing |
|---|---|---|---|
| angrop Python extension for angr that automatically generates ROP chains using symbolic execution and constraint solving methods. | BSD-2-Clause | Linux | Open Source |
| checksec Go-based utility for checking executable hardening properties including RELRO, stack canaries, NX bits, PIE, and FORTIFY_SOURCE. | BSD-3-Clause | Linux, macOS | Open Source |
| one_gadget Command-line tool that finds one-gadget RCE entry points in glibc binaries and outputs their register constraints clearly. | MIT | Linux | Open Source |
| pwndbg GDB and LLDB plugin that improves debugging for exploit development and reverse engineering with low-level inspection helpers. | MIT | Linux, macOS | Open Source |
| pwntools Python framework and exploit development library tailored for rapid prototyping, socket handling, and binary exploitation. | MIT AND BSD-2-Clause AND GPL-2.0-or-later | Linux, macOS, FreeBSD, Windows | Open Source |
| ROPgadget Gadget finder tool that searches binary files for ROP and JOP sequences to assist in crafting memory exploitation chains. | BSD-3-Clause | Linux, macOS, Windows | Open Source |
| Ropper Command-line tool and Python library for finding ROP and JOP gadgets in ELF, PE, and Mach-O binaries during exploit research. | BSD-3-Clause | Linux, macOS, Windows | Open Source |
About Binary Exploitation
Binary exploitation tools help security researchers understand how memory corruption vulnerabilities work and how compiler mitigations respond to them. The category includes ROP and JOP gadget finders that locate instruction sequences usable in return-oriented programming chains, exploit development frameworks that automate payload generation, and binary analysis tools that inspect control flow and memory layout. Researchers use these tools to verify that mitigations like ASLR, NX, PIE, RELRO, and stack canaries are correctly applied and to identify gaps where mitigations do not cover specific code paths. The work is primarily defensive: by understanding how exploits function, developers can harden software and validate that compiler flags and sandboxing configurations hold against realistic attack techniques. Tools in this category overlap with reverse engineering, since exploit development requires understanding compiled binaries at the instruction level. The category also includes debugger extensions such as pwndbg that track glibc heap allocations, which supports analysis of heap memory safety bugs.
Covered Topics
In This Catalog
- This category lists 7 tools: 7 open source.
- By platform, 7 run on Linux, 3 on Windows, and 5 on macOS.
- The most common license among the open-source tools is BSD-3-Clause (3 tools).
Frequently Asked Questions
What is Binary Exploitation?→
Tools used to develop and analyze binary exploits, find ROP and JOP gadgets, verify compiler mitigations like ASLR, NX, and stack canaries, and test memory safety protections.
What topics does the Binary Exploitation category cover?→
Exploit Analysis, Compiler Mitigation Verification, Memory Safety Testing, ROP & JOP Gadget Discovery, Payload Generation
Which Binary Exploitation tools are open source?→
7 of the 7 tools in this category are open source: angrop, checksec, one_gadget, pwndbg, pwntools, ROPgadget, and Ropper.