It can be used both locally and remotely (indicating IP and port)

Last update: Dec 29, 2022

Related tags

Overview

    ____                 ________  __________            __
   / __ \_      ______  / ____/ /_/ __/_  __/___  ____  / /
  / /_/ / | /| / / __ \/ /   / __/ /_  / / / __ \/ __ \/ / 
 / ____/| |/ |/ / / / / /___/ /_/ __/ / / / /_/ / /_/ / /  
/_/     |__/|__/_/ /_/\____/\__/_/   /_/  \____/\____/_/   
                                                           
                By: DiegoAltF4 and Dbd4

Tool for ret2win challenges.

It can be used both locally and remotely (indicating IP and port). It automatically finds the offset to the Instruction Pointer stored in the stack.

It can be configured to return a shell. By default, it prints the data received by the connection (possible flag). It also allows to display the offset to the instruction pointer in the stack and supports x86 architecture in both 32-bit and 64-bit. It can be used to debug the exploit with GDB.

Basic usage:

./PwnCtfTool.py -f vuln.bin -t flag_func

Auto PWN tool for CTF
optional arguments:
  -h, --help show this help message and exit
  -vv Max Verbose (debug)
  -v Verbose (info)
  -g Attach GDB
  -f FILE File to PWN
  -t TARGET Target Function
  --offset Print offset Instruction Pointer
  --shell Stay interactive
  --remote Exploit remote server

Installation:

git clone https://github.com/Diego-AltF4/PwnCtfTool.git
cd ./PwnCtfTool
pip3 install -r requirements.txt
chmod +x PwnCtfTool.py
./PwnCtfTool.py

Acknowledgements

_{David Billhardt}

Created by DiegoAltF4 and Dbd4

It can be used both locally and remotely (indicating IP and port)

Related tags

Overview

Tool for ret2win challenges.

Acknowledgements

Owner

DiegoAltF4

AdaFruit Funhouse publishing Temperature, Humidity and Pressure to MQTT / Apache Pulsar

Official ProtonVPN Linux app

Utility for converting IP Fabric webhooks into a Teams format.

🐛 SSH self spreading worm written in python3 to propagate a botnet.

Slowloris is basically an HTTP Denial of Service attack that affects threaded servers.

Serves some data over HTTP, once. Based on the built-in Python module http.server

The module that allows the collection of data sampling, which is transmitted with WebSocket via WIFI or serial port for CSV file.

Dark Utilities - Cloudflare Uam Bypass

Easy-to-setup bot, ChatOps project for handling telegram chat logging over docker-compose services, being runned as one of them.

Tool to transfer credential files from Firefox to your local machine to decrypt offline.

SonicWall SSL-VPN Exploit

FIRM-AFL is the first high-throughput greybox fuzzer for IoT firmware.

A database-based CDN node supporting PostgreSQL and MongoDB backends.

RabbitMQ asynchronous connector library for Python with built in RPC support

A python shell / chat bot for XMPP and cloud services

GlokyPortScannar is a really fast tool to scan TCP ports implemented in Python.

The sequel to SquidNet. It has many of the previous features that were in the original script, however a lot of the functions that do not serve much functionality have been removed.

Simple python script for automated network scans with random name generator(useful for CTF boxes).

A simple python application for generating a WiFi QR code for ease of connection

Web-server with a parser, connection to DBMS, and the Hugging Face.