It can be used both locally and remotely (indicating IP and port)

Last update: Dec 29, 2022

Related tags

Overview

    ____                 ________  __________            __
   / __ \_      ______  / ____/ /_/ __/_  __/___  ____  / /
  / /_/ / | /| / / __ \/ /   / __/ /_  / / / __ \/ __ \/ / 
 / ____/| |/ |/ / / / / /___/ /_/ __/ / / / /_/ / /_/ / /  
/_/     |__/|__/_/ /_/\____/\__/_/   /_/  \____/\____/_/   
                                                           
                By: DiegoAltF4 and Dbd4

Tool for ret2win challenges.

It can be used both locally and remotely (indicating IP and port). It automatically finds the offset to the Instruction Pointer stored in the stack.

It can be configured to return a shell. By default, it prints the data received by the connection (possible flag). It also allows to display the offset to the instruction pointer in the stack and supports x86 architecture in both 32-bit and 64-bit. It can be used to debug the exploit with GDB.

Basic usage:

./PwnCtfTool.py -f vuln.bin -t flag_func

Auto PWN tool for CTF
optional arguments:
  -h, --help show this help message and exit
  -vv Max Verbose (debug)
  -v Verbose (info)
  -g Attach GDB
  -f FILE File to PWN
  -t TARGET Target Function
  --offset Print offset Instruction Pointer
  --shell Stay interactive
  --remote Exploit remote server

Installation:

git clone https://github.com/Diego-AltF4/PwnCtfTool.git
cd ./PwnCtfTool
pip3 install -r requirements.txt
chmod +x PwnCtfTool.py
./PwnCtfTool.py

Acknowledgements

_{David Billhardt}

Created by DiegoAltF4 and Dbd4

It can be used both locally and remotely (indicating IP and port)

Related tags

Overview

Tool for ret2win challenges.

Acknowledgements

Owner

DiegoAltF4

Vent domain information retrieval tool, which is capable of retrieving customer information

NetworkX is a Python package for the creation, manipulation, and study of the structure, dynamics, and functions of complex networks.

Simple DNS resolver for asyncio

ServerStatus with node management and monitor

This will generate a very basic DHCP config with use of PHPIPAM systems.

Huawei firewall automatically updates Chinese ip to target IP group.

Equibles Stocks API for Python

syncio: asyncio, without await

A database-based CDN node supporting PostgreSQL and MongoDB backends.

Ping IP addresses and domains in parallel to find the accessible and inaccessible ones.

FramIp - it a framework for work at IP and domain

A python socket.io client for Roboteur

ProxyBroker is an open source tool that asynchronously finds public proxies from multiple sources and concurrently checks them

track IP Address

Scan any IP address except IPv6 using Python.

Home Assistant integration for MyEnergi devices

Using AWS's API Gateway + Lambda + Python to run a simple websocket application. For learning/testing

Python module to interface with Tuya WiFi smart devices

Impacket is a collection of Python classes for working with network protocols.

A transport agnostic sync/async RPC library that focuses on exposing services with a well-defined API using popular protocols.