It can be used both locally and remotely (indicating IP and port)

Last update: Dec 29, 2022

Related tags

Overview

    ____                 ________  __________            __
   / __ \_      ______  / ____/ /_/ __/_  __/___  ____  / /
  / /_/ / | /| / / __ \/ /   / __/ /_  / / / __ \/ __ \/ / 
 / ____/| |/ |/ / / / / /___/ /_/ __/ / / / /_/ / /_/ / /  
/_/     |__/|__/_/ /_/\____/\__/_/   /_/  \____/\____/_/   
                                                           
                By: DiegoAltF4 and Dbd4

Tool for ret2win challenges.

It can be used both locally and remotely (indicating IP and port). It automatically finds the offset to the Instruction Pointer stored in the stack.

It can be configured to return a shell. By default, it prints the data received by the connection (possible flag). It also allows to display the offset to the instruction pointer in the stack and supports x86 architecture in both 32-bit and 64-bit. It can be used to debug the exploit with GDB.

Basic usage:

./PwnCtfTool.py -f vuln.bin -t flag_func

Auto PWN tool for CTF
optional arguments:
  -h, --help show this help message and exit
  -vv Max Verbose (debug)
  -v Verbose (info)
  -g Attach GDB
  -f FILE File to PWN
  -t TARGET Target Function
  --offset Print offset Instruction Pointer
  --shell Stay interactive
  --remote Exploit remote server

Installation:

git clone https://github.com/Diego-AltF4/PwnCtfTool.git
cd ./PwnCtfTool
pip3 install -r requirements.txt
chmod +x PwnCtfTool.py
./PwnCtfTool.py

Acknowledgements

_{David Billhardt}

Created by DiegoAltF4 and Dbd4

It can be used both locally and remotely (indicating IP and port)

Related tags

Overview

Tool for ret2win challenges.

Acknowledgements

Owner

DiegoAltF4

The module that allows the collection of data sampling, which is transmitted with WebSocket via WIFI or serial port for CSV file.

Dshell is a network forensic analysis framework.

Dos attack a Bluetooth connection!

Out-of-box Python RPC framework

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

GNS3 Graphical Network Simulator

A benchmark for stateful fuzzing of network protocols

Very simple and tiny file sharing service written in python

BlueHawk is an HTTP/1.1 compliant web server developed in python

Tool that creates a complete copy of your server

Converts from PC formatted MAC addresses (hardware addresses) to Cisco format or vice-versa

Publish GPU miner info to MQTT

Qtas（Quite a Storage）is an experimental distributed storage system developed by Q-team in BJFU Advanced Computer Network sources.

A simple implementation of an RPC toolkit

🌐 Tools for Networking

EV: IDS Evasion via Packet Manipulation

Throttle rTorrent on Plex stream Start/Stop

Autopen is a very modular tool that automates the execution of scans during a penetration test.

A pure python implementation of multicast DNS service discovery

An HTML interface for finetuning the sync map output from aeneas