rz-solver
is a Rizin plugin that provides a simple interface to an SMT solver, currently supporting ROP (Return-Oriented Programming) constraint solving using RzIL APIs.
-
Configure the build using Meson:
meson --buildtype=debug --prefix=/usr/ buildDir/
Use
--prefix
to specify Rizin library directories. -
Compile and install the plugin:
ninja -C buildDir/ install
-
Load the binary and analyze for ROP gadget info:
rizin -N binary [0x00401000]> /Rg
-
Solve ROP constraints:
[0x00401000]> /Rs Usage: /Rs[?] <Gadget constraints> # ROP Gadget solver help