It can be used both locally and remotely (indicating IP and port)

Last update: Dec 29, 2022

Related tags

Overview

    ____                 ________  __________            __
   / __ \_      ______  / ____/ /_/ __/_  __/___  ____  / /
  / /_/ / | /| / / __ \/ /   / __/ /_  / / / __ \/ __ \/ / 
 / ____/| |/ |/ / / / / /___/ /_/ __/ / / / /_/ / /_/ / /  
/_/     |__/|__/_/ /_/\____/\__/_/   /_/  \____/\____/_/   
                                                           
                By: DiegoAltF4 and Dbd4

Tool for ret2win challenges.

It can be used both locally and remotely (indicating IP and port). It automatically finds the offset to the Instruction Pointer stored in the stack.

It can be configured to return a shell. By default, it prints the data received by the connection (possible flag). It also allows to display the offset to the instruction pointer in the stack and supports x86 architecture in both 32-bit and 64-bit. It can be used to debug the exploit with GDB.

Basic usage:

./PwnCtfTool.py -f vuln.bin -t flag_func

Auto PWN tool for CTF
optional arguments:
  -h, --help show this help message and exit
  -vv Max Verbose (debug)
  -v Verbose (info)
  -g Attach GDB
  -f FILE File to PWN
  -t TARGET Target Function
  --offset Print offset Instruction Pointer
  --shell Stay interactive
  --remote Exploit remote server

Installation:

git clone https://github.com/Diego-AltF4/PwnCtfTool.git
cd ./PwnCtfTool
pip3 install -r requirements.txt
chmod +x PwnCtfTool.py
./PwnCtfTool.py

Acknowledgements

_{David Billhardt}

Created by DiegoAltF4 and Dbd4

It can be used both locally and remotely (indicating IP and port)

Related tags

Overview

Tool for ret2win challenges.

Acknowledgements

Owner

DiegoAltF4

A live streaming chatroom involving multiple modalities, such as voice, gesture, and facial expression

A database-based CDN node supporting PostgreSQL and MongoDB backends.

Lets you remove all friends, leave GCs, and leave servers, in an instant!

snappi-trex is a snappi plugin that allows executing scripts written using snappi with Cisco's TRex Traffic Generator

Simple Port Scanner script written in Python, plans is to expand upon this script to turn it into a GUI based pen testing suite

This is a Client-Server-System which can share the screen from the server to client and in the other direction.

Python module to interface with Tuya WiFi smart devices

forward several ports into a single port

A Python tool used to automate the execution of the following tools : Nmap , Nikto and Dirsearch but also to automate the report generation during a Web Penetration Testing

A fire and forget command-line tool to allow for easy transitions of VPN connections between a pool of AWS machines.

wg-exporter is a simple yet effective Prometheus exporter for Wireguard

This is a simple python code to get the list of banned IP addresses from Fail2ban

Simple client for the Sirah Matisse Commander TCP server.

Distribute a portion of your yield to other addresses 💙

A Cheap Flight Alert program sends you a SMS to notify cheap flights in next 8 months.

A simple GitHub Action that physically puts your senses on alert when your build/release fails

ip2domain - get ip to domain, Know the domian corresponding to the local network connection IP

Makes dynamically updating your Cloudflare DNS records a bit easier ⏩👍😎

Cobalt Strike script for ScareCrow payloads

A pretty quick and simple interface to paramiko SFTP