some quick scripts I prepared while stuyding for the OSCP.
- Crash the application (spiking)
- Fuzzing (find aprox number of bytes where the crash took place)
- Find offset
- EIP control
- Check for enough space on buffer
- Badchars counting
- Find return address (JMP ESP)
- Create payload
├── ( 1 ) spiking
│ ├── (1)spikeTemplateGenerator.py
│ ├── (2)autoSpiking.sh
│ └── varList
├── ( 2 ) fuzzing
│ ├── (1)fuzzing.py
│ ├── (2)OffsetFinder.py
│ └── (3)pattern_offset.sh
├── ( 3 ) EIP_controlling
│ ├── (1)EIP-RW.py
│ ├── (2)badchar.py
│ └── (3)return_Address.py
└── ( 4 ) shellcode_generate
├── (1)shellcode_generator.sh
└── (2)exploit.py
apt-get update apt-get install python3 python3-pip python3-dev git libssl-dev libffi-dev build-essential python3 -m pip install --upgrade pip python3 -m pip install --upgrade pwntools
Thanks to these individuals for their contribution via code :)