It can be used both locally and remotely (indicating IP and port)

Last update: Dec 29, 2022

Related tags

Overview

    ____                 ________  __________            __
   / __ \_      ______  / ____/ /_/ __/_  __/___  ____  / /
  / /_/ / | /| / / __ \/ /   / __/ /_  / / / __ \/ __ \/ / 
 / ____/| |/ |/ / / / / /___/ /_/ __/ / / / /_/ / /_/ / /  
/_/     |__/|__/_/ /_/\____/\__/_/   /_/  \____/\____/_/   
                                                           
                By: DiegoAltF4 and Dbd4

Tool for ret2win challenges.

It can be used both locally and remotely (indicating IP and port). It automatically finds the offset to the Instruction Pointer stored in the stack.

It can be configured to return a shell. By default, it prints the data received by the connection (possible flag). It also allows to display the offset to the instruction pointer in the stack and supports x86 architecture in both 32-bit and 64-bit. It can be used to debug the exploit with GDB.

Basic usage:

./PwnCtfTool.py -f vuln.bin -t flag_func

Auto PWN tool for CTF
optional arguments:
  -h, --help show this help message and exit
  -vv Max Verbose (debug)
  -v Verbose (info)
  -g Attach GDB
  -f FILE File to PWN
  -t TARGET Target Function
  --offset Print offset Instruction Pointer
  --shell Stay interactive
  --remote Exploit remote server

Installation:

git clone https://github.com/Diego-AltF4/PwnCtfTool.git
cd ./PwnCtfTool
pip3 install -r requirements.txt
chmod +x PwnCtfTool.py
./PwnCtfTool.py

Acknowledgements

_{David Billhardt}

Created by DiegoAltF4 and Dbd4

It can be used both locally and remotely (indicating IP and port)

Related tags

Overview

Tool for ret2win challenges.

Acknowledgements

Owner

DiegoAltF4

InfraGenie is allows you to split out your infrastructure project into separate independent pieces, each with its own terraform state.

This is a python based command line Network Scanner utility, which input as an argument for the exact IP address or the relative IP Address range you wish to do the Network Scan for and returns all the available IP addresses with their MAC addresses on your current Network.

A simple chat room using socket and threading for handle multiple connections.

Arp-spoofing, this script was written for people who want to spoof any vulnerable machine such as Wİndows, of course it could have been more sophisticatedly created but these repos will be updated constantly

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

Makes dynamically updating your Cloudflare DNS records a bit easier ⏩👍😎

SonicWall SSL-VPN Exploit

A simple tcpdump sidecar injector to demonstrate Kubernetes's Mutating Webhook

CSP-style concurrency for Python

Simple Port Scanner script written in Python, plans is to expand upon this script to turn it into a GUI based pen testing suite

Connects to databases or sftp server based on configured environmental variables.

The sequel to SquidNet. It has many of the previous features that were in the original script, however a lot of the functions that do not serve much functionality have been removed.

Out-of-box Python RPC framework

A Python package for handling free proxies from sslproxies.org

Exfiltrate files using the HTTP protocol version ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1)

Pesquise, filtre e obtenha informações sobre animes. ( Módulo PIP )

pureSxS - A tool to export Component Based Servicing packages from a full Windows installation

FramIp - it a framework for work at IP and domain

Openconnect VPN RPi Gateway

Lets you remove all friends, leave GCs, and leave servers, in an instant!