HatAsm - a HatSploit native powerful assembler and disassembler that provides support for all common architectures

Last update: Nov 09, 2022

Related tags

Miscellaneous HatAsm

Overview

HatAsm

HatAsm is a HatSploit native powerful assembler and disassembler that provides support for all common architectures.

Features

Assembler and disassembler both available in one tool.
Support for most common architectures like x64, x86, aarch64, armle, mipsle, mipsbe.
Ability to assemble code right into the byte code.

Installation

pip3 install git+https://github.com/EntySec/HatAsm

Basic functions

There are all HatAsm basic functions that can be used to generate payload, covert data, assemble code or inject shellcode.

assemble(arch, code, mode=None) - Generate byte code for specified target from specified code (mode argument is used for armle and armbe to switch between thumb command set mode or arm).
disassemble(arch, code, mode=None) - Generate byte code for specified target from specified code (mode argument is used for armle and armbe to switch between thumb command set mode or arm).
hexdump(code, length=16, sep='.') - Hexdump for byte code.

Assembling code

It's very easy to assemble code for various targets in HatAsm. Let's assemble a simple code that calls shutdown for Linux.

Examples

from hatasm import HatAsm

code = """
start:
    push 0x3e
    pop rax
    push -1
    pop rdi
    push 0x9
    pop rsi
    syscall
"""

hatasm = HatAsm()
shellcode = hatasm.assemble('x64', code)

HatAsm CLI

HatAsm also has their own command line interface that can be invoked by executing hatasm command:

usage: hatasm [-h] [--arch ARCH] [--mode MODE] [-i INPUT] [-o OUTPUT] [-a]
              [-d]

HatAsm is a HatSploit native powerful assembler and disassembler that provides
support for all common architectures.

optional arguments:
  -h, --help            show this help message and exit
  --arch ARCH           Architecture to assemble or disassemble for.
  --mode MODE           Architecture mode (used for armle or armbe -
                        arm/thumb).
  -i INPUT, --input INPUT
                        Input file for assembler or disassembler.
  -o OUTPUT, --output OUTPUT
                        Output file to write output.
  -a, --assembler       Launch HatAsm assembler.
  -d, --disassembler    Launch HatAsm disassembler.

Examples

hatasm -a --arch x64

Run interactive assembler shell for x64 architecture.

hatasm > nop
00000000  90                                               |.               |
hatasm > start:
........     xor rax, rax
........     cdq
........     nop
........     
00000000  48 31 c0 99 90                                   |H1...           |
hatasm >

Write macos execve /bin/sh shellcode from command-line.

hatasm > start:
........     xor rax, rax
........     cdq
........     push rax
........     mov rdi, 0x68732f6e69622f2f
........     push rdi
........     push rsp
........     pop rdi
........     xor rsi, rsi
........     mov al, 0x2
........     ror rax, 0x28
........     mov al, 0x3b
........     syscall
........
00000000  48 31 c0 99 50 48 bf 2f  2f 62 69 6e 2f 73 68 57 |H1..PH.//bin/shW|
00000010  54 5f 48 31 f6 b0 02 48  c1 c8 28 b0 3b 0f 05    |T_H1...H..(.;.. |
hatasm >

You might also like...

A Powerful Tool For Making Combo List(All possible modes)

ComboMaker A Powerful Tool For Making Combo List Introduction Check out all possible Combo list build modes with this tool =) How to Install Open the

7 Jan 7, 2023

That is a example of a Book app on Python, made with support of all JS libraries on React framework

React+Python Books App You can use this repository whenever you want Used for a video Create the database: python -m dbutils Start the web server: pyt

1 Apr 20, 2022

Wrappers around the most common maya.cmds and maya.api use cases

Maya FunctionSet (maya_fn) A package that decompose core maya.cmds and maya.api features to a set of simple functions. Tests The recommended approach

9 Mar 12, 2022

A Python tool to check ASS subtitles for common mistakes and errors.

1 Dec 18, 2021

A collection of common regular expressions bundled with an easy to use interface.

CommonRegex Find all times, dates, links, phone numbers, emails, ip addresses, prices, hex colors, and credit card numbers in a string. We did the har

1.5k Dec 31, 2022

Team Curie is a group of people working together to achieve a common aim

Team Curie is a group of people working together to achieve a common aim. We are enthusiasts!.... We are setting the pace!.... We offer encouragement and motivation....And we believe TeamWork makes the DreamWork.

4 Aug 7, 2021

A practice program to find the LCM i.e Lowest Common Multiplication of two numbers using python without library.

Finding-LCM-using-python-from-scratch Here, I write a practice program to find the LCM i.e Lowest Common Multiplication of two numbers using python wi

4 Sep 24, 2021

An improved version of the common ˙pacman -S˙

BetterPacmanLook An improved version of the common pacman -S. Installation I know that this is probably one of the worst solutions and i will be worki

1 Nov 6, 2021

A compilation of useful scripts to automate common tasks

Scripts-To-Automate-This A compilation of useful scripts for common tasks Name What it does Type Add file extensions Adds ".png" to a list of file nam

0 Nov 5, 2021

HatAsm - a HatSploit native powerful assembler and disassembler that provides support for all common architectures

Related tags

Overview

HatAsm

Features

Installation

Basic functions

Assembling code

Examples

HatAsm CLI

Examples

You might also like...

A Powerful Tool For Making Combo List(All possible modes)

That is a example of a Book app on Python, made with support of all JS libraries on React framework

Wrappers around the most common maya.cmds and maya.api use cases

A Python tool to check ASS subtitles for common mistakes and errors.

A collection of common regular expressions bundled with an easy to use interface.

Team Curie is a group of people working together to achieve a common aim

A practice program to find the LCM i.e Lowest Common Multiplication of two numbers using python without library.

An improved version of the common ˙pacman -S˙

A compilation of useful scripts to automate common tasks

Releases(1.0.0)

Owner

EntySec

Defichain maxi - Scripts to optimize performance on defichain rewards

System Information Utility With Python

Генератор отчетов на Python с использованием библиотеки docx для работы с word-файлами и запросов к сервису

thonny plugin for gitonic

Tucan Discord Token Generator - Remastered

Parser for RISC OS Font control characters in Python

Python-Roadmap - Дорожная карта по изучению Python

Sardana integration into the Jupyter ecosystem.

A collection of daily usage utility scripts in python. Helps in automation of day to day repetitive tasks.

A comprensive software collection for nmea manipulation

ChainJacking is a tool to find which of your Go lang direct GitHub dependencies is susceptible to ChainJacking attack.

Film-dosimetry - Film dosimetry for DUVS

Bookmarkarchiver - Python script that archives all of your bookmarks on the Internet Archive

This Python script can enumerate all URLs present in robots.txt files, and test whether they can be accessed or not.

SpaCy3Urdu: run command to setup assets(dataset from UD)

tetrados is a tool to generate a density of states using the linear tetrahedron method from a band structure.

A collection of existing KGQA datasets in the form of the huggingface datasets library, aiming to provide an easy-to-use access to them.

Simple Kahoot Botter.

We are building an open database of COVID-19 cases with chest X-ray or CT images.

DG - A(n) (unusual) programming language