It can be used both locally and remotely (indicating IP and port)

Last update: Dec 29, 2022

Related tags

Overview

    ____                 ________  __________            __
   / __ \_      ______  / ____/ /_/ __/_  __/___  ____  / /
  / /_/ / | /| / / __ \/ /   / __/ /_  / / / __ \/ __ \/ / 
 / ____/| |/ |/ / / / / /___/ /_/ __/ / / / /_/ / /_/ / /  
/_/     |__/|__/_/ /_/\____/\__/_/   /_/  \____/\____/_/   
                                                           
                By: DiegoAltF4 and Dbd4

Tool for ret2win challenges.

It can be used both locally and remotely (indicating IP and port). It automatically finds the offset to the Instruction Pointer stored in the stack.

It can be configured to return a shell. By default, it prints the data received by the connection (possible flag). It also allows to display the offset to the instruction pointer in the stack and supports x86 architecture in both 32-bit and 64-bit. It can be used to debug the exploit with GDB.

Basic usage:

./PwnCtfTool.py -f vuln.bin -t flag_func

Auto PWN tool for CTF
optional arguments:
  -h, --help show this help message and exit
  -vv Max Verbose (debug)
  -v Verbose (info)
  -g Attach GDB
  -f FILE File to PWN
  -t TARGET Target Function
  --offset Print offset Instruction Pointer
  --shell Stay interactive
  --remote Exploit remote server

Installation:

git clone https://github.com/Diego-AltF4/PwnCtfTool.git
cd ./PwnCtfTool
pip3 install -r requirements.txt
chmod +x PwnCtfTool.py
./PwnCtfTool.py

Acknowledgements

_{David Billhardt}

Created by DiegoAltF4 and Dbd4

It can be used both locally and remotely (indicating IP and port)

Related tags

Overview

Tool for ret2win challenges.

Acknowledgements

Owner

DiegoAltF4

FramIp - it a framework for work at IP and domain

Synchronised text editor over TCP, for live editing with others.

A database-based CDN node supporting PostgreSQL and MongoDB backends.

test whether http(s) proxies actually hide your ip

Visualize the electric field of a point charge network.

This is a small python code that I use with my NAS server connected to Plex

A Python framework for interacting with Solana's Pyth network.

The World Most Fastest Proxy Checker In Python, Maybe?!

Makes dynamically updating your Cloudflare DNS records a bit easier ⏩👍😎

Geowifi 📡 💘 🌎 Search WiFi geolocation data by BSSID and SSID on different public databases.

9SPY: a Windows RAT built in Python using sockets

Python Scripts for Cisco Identity Services Engine (ISE)

This is a simple python script to collect sub-domains from hackertarget API

GitHub action for sspanel automatically checks in to get free traffic quota

Arp-spoofing, this script was written for people who want to spoof any vulnerable machine such as Wİndows, of course it could have been more sophisticatedly created but these repos will be updated constantly

ServerStatus with node management and monitor

KoreaVPN - Create a VPN App for Mac Using Automator

FIRM-AFL is the first high-throughput greybox fuzzer for IoT firmware.

Use Fast Redirect to easily redirect your domains.

Ping Verification Python Script