All Projects → kokjo → Universalrop

kokjo / Universalrop

Small tool for generating ropchains using unicorn and z3

Programming Languages

python
139335 projects - #7 most used programming language

Projects that are alternatives of or similar to Universalrop

Easyrop
A Python tool to generate ROP chains
Stars: ✭ 54 (-72.45%)
Mutual labels:  capstone, rop
Lockphish
Lockphish it's the first tool (07/04/2020) for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link.
Stars: ✭ 186 (-5.1%)
Mutual labels:  hacking
Crithit
Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.
Stars: ✭ 182 (-7.14%)
Mutual labels:  hacking
Webmap
A Python tool used to automate the execution of the following tools : Nmap , Nikto and Dirsearch but also to automate the report generation during a Web Penetration Testing
Stars: ✭ 188 (-4.08%)
Mutual labels:  hacking
Apicheck
The DevSecOps toolset for REST APIs
Stars: ✭ 184 (-6.12%)
Mutual labels:  hacking
0x00sec code
Code for my 0x00sec.org posts
Stars: ✭ 190 (-3.06%)
Mutual labels:  hacking
Windows Hacks
Creative and unusual things that can be done with the Windows API.
Stars: ✭ 2,171 (+1007.65%)
Mutual labels:  hacking
Awesome Windows Security
List of Awesome Windows Security Resources
Stars: ✭ 196 (+0%)
Mutual labels:  hacking
Hrshell
HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.
Stars: ✭ 193 (-1.53%)
Mutual labels:  hacking
Twitterx
Keeping Twitter for macOS alive with code injection
Stars: ✭ 187 (-4.59%)
Mutual labels:  hacking
Mouse
Mouse Framework is an iOS and macOS post-exploitation framework that gives you a command line session with extra functionality between you and a target machine using only a simple Mouse payload. Mouse gives you the power and convenience of uploading and downloading files, tab completion, taking pictures, location tracking, shell command execution, escalating privileges, password retrieval, and much more.
Stars: ✭ 186 (-5.1%)
Mutual labels:  hacking
Awesome Shodan Queries
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻
Stars: ✭ 2,758 (+1307.14%)
Mutual labels:  hacking
Exrop
Automatic ROPChain Generation
Stars: ✭ 191 (-2.55%)
Mutual labels:  rop
Rebel Framework
Advanced and easy to use penetration testing framework 💣🔎
Stars: ✭ 183 (-6.63%)
Mutual labels:  hacking
Facebash
Facebook Brute Forcer in shellscript using TOR
Stars: ✭ 195 (-0.51%)
Mutual labels:  hacking
Hack Tools
The all-in-one Red Team extension for Web Pentester 🛠
Stars: ✭ 2,750 (+1303.06%)
Mutual labels:  hacking
Hackercouch
Hospitality for Hackers
Stars: ✭ 185 (-5.61%)
Mutual labels:  hacking
Getjs
A tool to fastly get all javascript sources/files
Stars: ✭ 190 (-3.06%)
Mutual labels:  hacking
Asu
facebook hacking toolkit
Stars: ✭ 197 (+0.51%)
Mutual labels:  hacking
Mosint
An automated e-mail OSINT tool
Stars: ✭ 184 (-6.12%)
Mutual labels:  hacking
$ time python test_amd64.py 
Gadgets used:
0x1000104: pop r13; pop r14; ret 
0x1000500: mov rax, r13; ret 
0x1000700: pop rdx; jmp rax
0x1000a00: pop rsi; ret 
0x1000102: pop r12; pop r13; pop r14; ret 
0x1000500: mov rax, r13; ret 
0x1000200: mov rdi, rax; pop rbx; ret 
Ropchain:
00000000  04 01 00 01  00 00 00 00  00 0a 00 01  00 00 00 00  │····│····│····│····│
00000010  52 44 49 3d  41 52 47 11  00 05 00 01  00 00 00 00  │RDI=│ARG·│····│····│
00000020  00 07 00 01  00 00 00 00  52 44 58 3d  41 52 47 33  │····│····│RDX=│ARG3│
00000030  52 53 49 3d  41 52 47 32  02 01 00 01  00 00 00 00  │RSI=│ARG2│····│····│
00000040  02 05 08 14  01 00 03 00  52 44 49 3d  41 52 47 31  │····│····│RDI=│ARG1│
00000050  52 44 49 3c  41 52 47 11  00 05 00 01  00 00 00 00  │RDI<│ARG·│····│····│
00000060  00 02 00 01  00 00 00 00  52 49 50 3d  46 55 4e 43  │····│····│RIP=│FUNC│
00000070  52 49 50 3d  46 55 4e 43                            │RIP=│FUNC││
00000078
 
real    1m25.203s
user    1m24.408s
sys 0m0.784s
$ time python test_arm.py
Gadgets used:
0x1000: pop {r1, r2, r7, pc}
0x1010: mov r0, r2; pop {r7, pc}
0x1000: pop {r1, r2, r7, pc}
0x1020: mov r3, r0; bx r7
0x1010: mov r0, r2; pop {r7, pc}
0x1000: pop {r1, r2, r7, pc}
Ropchain:
00000000  00 10 00 00  41 52 47 32  41 52 47 34  11 00 00 00  │····│ARG2│ARG4│····│
00000010  10 10 00 00  11 00 00 00  00 10 00 00  41 52 47 32  │····│····│····│ARG2│
00000020  41 52 47 31  10 10 00 00  20 10 00 00  41 52 47 32  │ARG1│····│ ···│ARG2│
00000030  00 10 00 00  41 52 47 32  41 52 47 33  00 00 00 00  │····│ARG2│ARG3│····│
00000040  46 55 4e 43                                         │FUNC││
00000044
 
real    0m13.315s
user    0m12.632s
sys 0m0.632s
Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].