Some shell scripts that are useful for exploitation, though you should really use pwntools instead.
Shellcoding:
- assemble: build shellcode,
assemble shellcode.s
orassemble "mov rax, 60; syscall"
- disassemble: disassemble shellcode,
disassemble shellcode.raw
ordisassemble <(echo -ne '\xcc')
- analyze: analyzes shellcode,
analyze shellcode.elf
- lookup-syscall: lookup syscall number,
lookup-syscall -a i686 read
- lookup-constant: print the value of a constant (really, any C expression):
lookup-constant "PROT_EXEC|PROT_READ|PROT_WRITE"
Misc:
- run-c: compile a C expression into main and run it,
c-run 'puts(argv[1]);' test
Management:
- setup.sh: add the
scripts/
dir to yourPATH
via.bashrc
- update-syscalls.sh: update the syscall tables
- test.sh: some testcases