It can be used both locally and remotely (indicating IP and port)

Last update: Dec 29, 2022

Related tags

Overview

    ____                 ________  __________            __
   / __ \_      ______  / ____/ /_/ __/_  __/___  ____  / /
  / /_/ / | /| / / __ \/ /   / __/ /_  / / / __ \/ __ \/ / 
 / ____/| |/ |/ / / / / /___/ /_/ __/ / / / /_/ / /_/ / /  
/_/     |__/|__/_/ /_/\____/\__/_/   /_/  \____/\____/_/   
                                                           
                By: DiegoAltF4 and Dbd4

Tool for ret2win challenges.

It can be used both locally and remotely (indicating IP and port). It automatically finds the offset to the Instruction Pointer stored in the stack.

It can be configured to return a shell. By default, it prints the data received by the connection (possible flag). It also allows to display the offset to the instruction pointer in the stack and supports x86 architecture in both 32-bit and 64-bit. It can be used to debug the exploit with GDB.

Basic usage:

./PwnCtfTool.py -f vuln.bin -t flag_func

Auto PWN tool for CTF
optional arguments:
  -h, --help show this help message and exit
  -vv Max Verbose (debug)
  -v Verbose (info)
  -g Attach GDB
  -f FILE File to PWN
  -t TARGET Target Function
  --offset Print offset Instruction Pointer
  --shell Stay interactive
  --remote Exploit remote server

Installation:

git clone https://github.com/Diego-AltF4/PwnCtfTool.git
cd ./PwnCtfTool
pip3 install -r requirements.txt
chmod +x PwnCtfTool.py
./PwnCtfTool.py

Acknowledgements

_{David Billhardt}

Created by DiegoAltF4 and Dbd4

It can be used both locally and remotely (indicating IP and port)

Related tags

Overview

Tool for ret2win challenges.

Acknowledgements

Owner

DiegoAltF4

mitm6 is a pentesting tool that exploits the default configuration of Windows to take over the default DNS server.

Simple Python Script to Parse Apache Log, Get all Unique IPs and Urls visited by that IP

A simple framwork to streamline the Domain Adaptation training process.

Load balancing DICOM router

Jogo da forca simples com conexão entre cliente e servidor utilizando TCP.

Socialhome is best described as a federated personal profile with social networking functionality

Connects to databases or sftp server based on configured environmental variables.

A simple implementation of an RPC toolkit

Ultimate transformation library that supports validation, contexts and aiohttp.

This tools just for education only - Layer-7 or HTTP FLOODER

A Python package for handling free proxies from sslproxies.org

A gRPC-Web implementation for Python

Synchronised text editor over TCP, for live editing with others.

Easy-to-setup bot, ChatOps project for handling telegram chat logging over docker-compose services, being runned as one of them.

A simple, 2-person chat program that runs on a single computer. No Internet, just you

Light, simple RPC framework for Python

Search ports in multiples hosts

Python implementation of the IPv8 layer provide authenticated communication with privacy

SMS Based Headless Browsing

An curated collection of awesome resources about networking in cybersecurity