It can be used both locally and remotely (indicating IP and port)

Last update: Dec 29, 2022

Related tags

Overview

    ____                 ________  __________            __
   / __ \_      ______  / ____/ /_/ __/_  __/___  ____  / /
  / /_/ / | /| / / __ \/ /   / __/ /_  / / / __ \/ __ \/ / 
 / ____/| |/ |/ / / / / /___/ /_/ __/ / / / /_/ / /_/ / /  
/_/     |__/|__/_/ /_/\____/\__/_/   /_/  \____/\____/_/   
                                                           
                By: DiegoAltF4 and Dbd4

Tool for ret2win challenges.

It can be used both locally and remotely (indicating IP and port). It automatically finds the offset to the Instruction Pointer stored in the stack.

It can be configured to return a shell. By default, it prints the data received by the connection (possible flag). It also allows to display the offset to the instruction pointer in the stack and supports x86 architecture in both 32-bit and 64-bit. It can be used to debug the exploit with GDB.

Basic usage:

./PwnCtfTool.py -f vuln.bin -t flag_func

Auto PWN tool for CTF
optional arguments:
  -h, --help show this help message and exit
  -vv Max Verbose (debug)
  -v Verbose (info)
  -g Attach GDB
  -f FILE File to PWN
  -t TARGET Target Function
  --offset Print offset Instruction Pointer
  --shell Stay interactive
  --remote Exploit remote server

Installation:

git clone https://github.com/Diego-AltF4/PwnCtfTool.git
cd ./PwnCtfTool
pip3 install -r requirements.txt
chmod +x PwnCtfTool.py
./PwnCtfTool.py

Acknowledgements

_{David Billhardt}

Created by DiegoAltF4 and Dbd4

It can be used both locally and remotely (indicating IP and port)

Related tags

Overview

Tool for ret2win challenges.

Acknowledgements

Owner

DiegoAltF4

A simple python script to send cute messages to my boyfriend.

Out-of-box Python RPC framework

Multiple-requests-poster - A tool to send multiple requests to a particular website written in Python

A simple GitHub Action that physically puts your senses on alert when your build/release fails

Linux SBC featuring two wifi radios, masquerading as a USB charger.

Tool to get the top 100 of the fastest nodes in the Tor network. Based on Kirzahk tool.

Qtas（Quite a Storage）is an experimental distributed storage system developed by Q-team in BJFU Advanced Computer Network sources.

👨🏼‍💻 ‎‎‎‏‏ A customizable man-in-the-middle TCP proxy with out-of-the-box support for HTTP & HTTPS.

A script for generating WireGuard configs from Surfshark VPN

Automated network configuration backups using Github actions and git-scraping

Slowloris is basically an HTTP Denial of Service attack that affects threaded servers.

This is a simple python script to collect sub-domains from hackertarget API

Library containing the core modules for the kingdom-python-server.

TLD records archive. Revisiting the original TLDR project by mandatoryprogrammer, on the hunt for more root nameserver changes.

the objective of this project is to create a Node Js server with a Python client

This is a simple python code to get the list of banned IP addresses from Fail2ban

IP Pinger - This tool allows you to enter an IP and check if its currently connected to a host

🐛 SSH self spreading worm written in python3 to propagate a botnet.

This is a small python code that I use with my NAS server connected to Plex

AV Evasion, a Red Team Tool - Fiber, APC, PNG and UUID