Skip to content

agentOfChaos/chaos-controller

Repository files navigation

Chaos controller v1.3 by agentOfChaos

This project realizes an idea I had some time ago: what if we could influence a program's random number generator, so that it generate numbers of our choice? (just like having an improbability drive in operation, but more controlled ;-)

Basically it modifies the memory region of the target process in which libc resides, replacing the 'call random' instruction with a nice 'move your_value to eax', bypassing completely the random number generation and returning your chosen value instead.

The executable itself is called 'chaos_control' because it's shorter and cooler.

The mrmaps shell script must stay in the same directory as the executable

Before compiling: the mrmaps shell script contains a variable named setup_libc, make sure that its value define unambiguously the libc shared object used by your system. Thake a look in your /proc/$somepid/maps and look for "libc-.so" That should be setup_libc 's value.

Compiling:
make release

Usage: ./chaos_control --help
will provide instructions and examples

Tested on ubuntu linux x86_64
Tested on Arch linux x86_64

About

libc random number generator hacking tool

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors