pwntools
- sudo apt install python-pip python3-pip
- sudo pip install pwntools
- 提示安装python-dev可以使用aptitude安装
- 这一步建议挂代理
- python
>>> import pwn >>> pwn.asm("xor eax,eax") '1\xc0' #安装成功 |
pwndgb
- git clone https://github.com/pwndbg/pwndbg
- cd pwndbg
- ./setup.sh
gef
- wget -q https://github.com/hugsy/gef/raw/master/gef.py
- echo “source ~/gef/gef.py” >> ~/.gdbinit
peda
- git clone https://github.com/longld/peda.git ~/peda
- echo “source ~/peda/peda.py” >> ~/.gdbinitfile
ROPgadget
- 用来构建rop链
- git clone https://github.com/JonathanSalwan/ROPgadget.git
- pip install capstone
- cd ROPgadget
- python setup.py install
- ROPgadget
one_gadget
- 寻找libc文件中的一些shell地址
- gem install one_gadget
切换脚本
function Mode_change { name=$1 gdbinitfile=/root/.gdbinit #这个路径按照你的实际情况修改 peda="source ~/peda/peda.py" #这个路径按照你的实际情况修改 gef="source ~/gef/gef.py" #这个路径按照你的实际情况修改 pwndbg="source /root/pwndbg/gdbinit.py" #这个路径按照你的实际情况修改 sign=$(cat $gdbinitfile | grep -n "#this place is controled by user's shell") #此处上面的查找内容要和你自己的保持一致 pattern=":£this place is controled by user's shell" number=${sign%$pattern} location=$[number+2] parameter_add=${location}i parameter_del=${location}d message="TEST" if [ $name -eq "1" ];then sed -i "$parameter_del" $gdbinitfile sed -i "$parameter_add $peda" $gdbinitfile echo -e "Please enjoy the peda!\n" elif [ $name -eq "2" ];then sed -i "$parameter_del" $gdbinitfile sed -i "$parameter_add $gef" $gdbinitfile echo -e "Please enjoy the gef!\n" else sed -i "$parameter_del" $gdbinitfile sed -i "$parameter_add $pwndbg" $gdbinitfile echo -e "Please enjoy the pwndbg!\n" fi } echo -e "Please choose one mode of GDB?\n1.peda 2.gef 3.pwndbg" read -p "Input your choice:" num if [ $num -eq "1" ];then Mode_change $num elif [ $num -eq "2" ];then Mode_change $num elif [ $num -eq "3" ];then Mode_change $num else echo -e "Error!\nPleasse input right number!" fi gdb $1 $2 $3 $4 $5 $6 $7 $8 $9 |
zsh
- apt-get install zsh
- git clone https://github.com/robbyrussell/oh-my-zsh.git
- cd oh-my-zsh/tools
- ./install.sh
- 下载安装 zsh-autosuggestions （自动补全可能路径）
- git clone git://github.com/zsh-users/zsh-autosuggestions $ZSH_CUSTOM/plugins/zsh-autosuggestions
- git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting
- vi ~/.zshrc
- plugins=(git zsh-autosuggestions zsh-syntax-highlighting)
- source .zshrc
- 改变默认shell
- chsh -s /bin/zsh
原创文章，作者：小嵘源码，如若转载，请注明出处：https://www.lcpttec.com/ctf-pwn/
微信扫一扫 
支付宝扫一扫