It can be used both locally and remotely (indicating IP and port)

Last update: Dec 29, 2022

Related tags

Overview

    ____                 ________  __________            __
   / __ \_      ______  / ____/ /_/ __/_  __/___  ____  / /
  / /_/ / | /| / / __ \/ /   / __/ /_  / / / __ \/ __ \/ / 
 / ____/| |/ |/ / / / / /___/ /_/ __/ / / / /_/ / /_/ / /  
/_/     |__/|__/_/ /_/\____/\__/_/   /_/  \____/\____/_/   
                                                           
                By: DiegoAltF4 and Dbd4

Tool for ret2win challenges.

It can be used both locally and remotely (indicating IP and port). It automatically finds the offset to the Instruction Pointer stored in the stack.

It can be configured to return a shell. By default, it prints the data received by the connection (possible flag). It also allows to display the offset to the instruction pointer in the stack and supports x86 architecture in both 32-bit and 64-bit. It can be used to debug the exploit with GDB.

Basic usage:

./PwnCtfTool.py -f vuln.bin -t flag_func

Auto PWN tool for CTF
optional arguments:
  -h, --help show this help message and exit
  -vv Max Verbose (debug)
  -v Verbose (info)
  -g Attach GDB
  -f FILE File to PWN
  -t TARGET Target Function
  --offset Print offset Instruction Pointer
  --shell Stay interactive
  --remote Exploit remote server

Installation:

git clone https://github.com/Diego-AltF4/PwnCtfTool.git
cd ./PwnCtfTool
pip3 install -r requirements.txt
chmod +x PwnCtfTool.py
./PwnCtfTool.py

Acknowledgements

_{David Billhardt}

Created by DiegoAltF4 and Dbd4

It can be used both locally and remotely (indicating IP and port)

Related tags

Overview

Tool for ret2win challenges.

Acknowledgements

Owner

DiegoAltF4

IP-Escaner - A Python Tool to obtain information from an IP address

A Python3 discord trojan, utilizing discord webhooks for sending information.

Anonymously Reverse shell over Tor Network using Hidden Services without portfortwarding

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files) and Zeek logs.

A p2p chat app for zephyr

Very simple and tiny file sharing service written in python

Simple Port Scanner script written in Python, plans is to expand upon this script to turn it into a GUI based pen testing suite

Desktop application for checking sites connection in a background mode

Passive TCP/IP Fingerprinting Tool. Run this on your server and find out what Operating Systems your clients are really using.

pyWhisker is a Python equivalent of the original Whisker made by Elad Shamir and written in C#.

A simple framwork to streamline the Domain Adaptation training process.

Bark Toolkit is a toolkit wich provides Denial-of-service attacks, SMS attacks and more.

Arp-spoofing, this script was written for people who want to spoof any vulnerable machine such as Wİndows, of course it could have been more sophisticatedly created but these repos will be updated constantly

StarCraft II Client - protocol definitions used to communicate with StarCraft II.

NetMiaou is an crossplatform hacking tool that can do reverse shells, send files, create an http server or send and receive tcp packet

Utility for converting IP Fabric webhooks into a Teams format.

TunnelProxy 是一个本地隧道代理，可以从fofa爬取免费的socks代理，然后构建代理池，如果一个代理失效，会自动切换

Ultimate transformation library that supports validation, contexts and aiohttp.

A Python tool used to automate the execution of the following tools : Nmap , Nikto and Dirsearch but also to automate the report generation during a Web Penetration Testing

Home Assistant integration for MyEnergi devices

It can be used both locally and remotely (indicating IP and port)

Related tags

Overview

Tool for ret2win challenges.

Acknowledgements

Owner

DiegoAltF4

IP-Escaner - A Python Tool to obtain information from an IP address

A Python3 discord trojan, utilizing discord webhooks for sending information.

Anonymously Reverse shell over Tor Network using Hidden Services without portfortwarding

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files) and Zeek logs.

A p2p chat app for zephyr

Very simple and tiny file sharing service written in python

Simple Port Scanner script written in Python, plans is to expand upon this script to turn it into a GUI based pen testing suite

Desktop application for checking sites connection in a background mode

Passive TCP/IP Fingerprinting Tool. Run this on your server and find out what Operating Systems your clients are *really* using.

pyWhisker is a Python equivalent of the original Whisker made by Elad Shamir and written in C#.

A simple framwork to streamline the Domain Adaptation training process.

Bark Toolkit is a toolkit wich provides Denial-of-service attacks, SMS attacks and more.

Arp-spoofing, this script was written for people who want to spoof any vulnerable machine such as Wİndows, of course it could have been more sophisticatedly created but these repos will be updated constantly

StarCraft II Client - protocol definitions used to communicate with StarCraft II.

NetMiaou is an crossplatform hacking tool that can do reverse shells, send files, create an http server or send and receive tcp packet

Utility for converting IP Fabric webhooks into a Teams format.

TunnelProxy 是一个本地隧道代理，可以从fofa爬取免费的socks代理，然后构建代理池，如果一个代理失效，会自动切换

Ultimate transformation library that supports validation, contexts and aiohttp.

A Python tool used to automate the execution of the following tools : Nmap , Nikto and Dirsearch but also to automate the report generation during a Web Penetration Testing

Home Assistant integration for MyEnergi devices

Passive TCP/IP Fingerprinting Tool. Run this on your server and find out what Operating Systems your clients are really using.