It can be used both locally and remotely (indicating IP and port)

Last update: Dec 29, 2022

Related tags

Overview

    ____                 ________  __________            __
   / __ \_      ______  / ____/ /_/ __/_  __/___  ____  / /
  / /_/ / | /| / / __ \/ /   / __/ /_  / / / __ \/ __ \/ / 
 / ____/| |/ |/ / / / / /___/ /_/ __/ / / / /_/ / /_/ / /  
/_/     |__/|__/_/ /_/\____/\__/_/   /_/  \____/\____/_/   
                                                           
                By: DiegoAltF4 and Dbd4

Tool for ret2win challenges.

It can be used both locally and remotely (indicating IP and port). It automatically finds the offset to the Instruction Pointer stored in the stack.

It can be configured to return a shell. By default, it prints the data received by the connection (possible flag). It also allows to display the offset to the instruction pointer in the stack and supports x86 architecture in both 32-bit and 64-bit. It can be used to debug the exploit with GDB.

Basic usage:

./PwnCtfTool.py -f vuln.bin -t flag_func

Auto PWN tool for CTF
optional arguments:
  -h, --help show this help message and exit
  -vv Max Verbose (debug)
  -v Verbose (info)
  -g Attach GDB
  -f FILE File to PWN
  -t TARGET Target Function
  --offset Print offset Instruction Pointer
  --shell Stay interactive
  --remote Exploit remote server

Installation:

git clone https://github.com/Diego-AltF4/PwnCtfTool.git
cd ./PwnCtfTool
pip3 install -r requirements.txt
chmod +x PwnCtfTool.py
./PwnCtfTool.py

Acknowledgements

_{David Billhardt}

Created by DiegoAltF4 and Dbd4

It can be used both locally and remotely (indicating IP and port)

Related tags

Overview

Tool for ret2win challenges.

Acknowledgements

Owner

DiegoAltF4

An open source bias lighting program which syncs up colored lights to the contents of your screen.

Cobalt Strike script for ScareCrow payloads

the objective of this project is to create a Node Js server with a Python client

PoC code for stealing the WiFi password of a network with a Lovebox IOT device connected

IP-Escaner - A Python Tool to obtain information from an IP address

A website to list Shadowsocks proxies and check them periodically

This is the code repository for Mastering Python for Networking and Security – Second Edition

track IP Address

Linkedin Connection Automation

ARTEMIS: Real-Time Detection and Automatic Mitigation for BGP Prefix Hijacking.

Decentra Network is an open source blockchain that combines speed, security and decentralization.

Port Traffic/Bandwidth Monitor Script

Base on browser-time to get har from network, and use python to analyze the data .

Secure connection between tenhou Window client and server.

Python 3 tool for finding unclaimed groups on Roblox. Supports multi-threading, multi-processing and HTTP proxies.

Dark Utilities - Cloudflare Uam Bypass

Burp Extension that copies a request and builds a FFUF skeleton

Connection package to a raspberry or any other machine using ssh, it simplifies the deployment scripts and monitoring.

The can package provides controller area network support for Python developers

Simple local RPG turn-based to play while learn something using the anki system