Skip to content

My little tools created to study and practice offensive thinking

Notifications You must be signed in to change notification settings

diegoalbuquerque/offensivetools

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

10 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

offensivetools

My little tools created to study and practice my offensive thinking https://www.offensivethink.com

Byte Array Generator

Generate partial or full bytearray to help at binary exploitation

[+] use: ./bytearraygen [-i From_Value] [-l To_Value] [-b Badchars_to_exclude>] [-f file_name]

This script will generate two files of chars in hexadecimal format and binary format to use with mona.py or another similar script to find bad chars in memory, from Initial Value (-i) to last value (-l), excluding Badchars (-b)

Parameters:

All parameters are optional.
-i -> Initial value
-l -> last value
-b -> String of hexadecimal values separate by comma
-f -> file name

Output:

<file_name>.txt -> array of hexadecimal values
<file_name>.bin -> binary file of chars.

Example

$./bytearraygen.py -i 75 -l 100 -b "0x5c,0x5e"    
╔╗ ┬ ┬┌┬┐┌─┐╔═╗┬─┐┬─┐┌─┐┬ ┬
╠╩╗└┬┘ │ ├┤ ╠═╣├┬┘├┬┘├─┤└┬┘
╚═╝ ┴  ┴ └─┘╩ ╩┴└─┴└─┴ ┴ ┴ 
┌─┐┌─┐┌┐┌┌─┐┬─┐┌─┐┌┬┐┌─┐┬─┐
│ ┬├┤ │││├┤ ├┬┘├─┤ │ │ │├┬┘
└─┘└─┘┘└┘└─┘┴└─┴ ┴ ┴ └─┘┴└─
v0.1 -           19.03.2021
            by joaninhaDark
 
[+] Generating bytearray from 75 to 100 to files: bytearray.txt/.bin
[-] Excluded 0x5c,0x5e, bytes: 
[+] line to copy paste: 

buf="\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5d\x5f\x60\x61\x62\x63"

$ xxd bytearray.bin                                
00000000: 4b4c 4d4e 4f50 5152 5354 5556 5758 595a  KLMNOPQRSTUVWXYZ
00000010: 5b5d 5f60 6162 63                        []_`abc

$ cat bytearray.txt
\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5d\x5f\x60\x61\x62\x63%                                                                              

getenviroment

Print the enviroment variable address and its content in hexadecimal

 [+] use:  getenviroment <variable-name> <length-of-memory>
    <variable-name> : enviroment variable name to get the address
    <length-of-memory> : length, in bytes, of memory that will be leaked beginning 
                          at address of the variable 

     caution! Big length can cause Segmentation Fault if the application try to read
              not allowed memory!

 [+] Example: 
      $ export binsh="/bin/sh"  (\x2f\x62\x69\x6e\x2f\x73\x68)
      $ getenviroment binsh 20
        [+] The variable binsh is at: 0xffffdfb5
        [+] Memory content at 0xffffdfb5
            \x2F\x62\x69\x6E\x2F\x73\x68\x0\x5F\x3D\x2F\x68\x6F\x6D\x65\x2F\x6B\x61\x6C\x69%   

About

My little tools created to study and practice offensive thinking

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages