Parque Nacional del Guadarrama, Madrid (ESPAÑA)

-

jueves, 16 de abril de 2020

Router-Exploit-Shovel: An Automated Application Generator For Stack Overflow Types On Wireless Routers

About Router-Exploit-Shovel
   Router-Exploit-Shovel is an automated application generation for Stack Overflow types on Wireless Routers.

   Router exploits shovel is an automated application generation tool for stack overflow types on wireless routers. The tool implements the key functions of exploits, it can adapt to the length of the data padding on the stack, generate the ROP chain, generate the encoded shellcode, and finally assemble them into a complete attack code. The user only needs to attach the attack code to the overflow location of the POC to complete the Exploit of the remote code execution.

   The tool supports MIPSel and MIPSeb.Run on Ubuntu 16.04 64bit.

Router-Exploit-Shovel's Installation
   Open your Terminal and enter these commands:
Usage


   Example: python3 Router_Exploit_Shovel.py -b test_binaries/mipseb-httpd -l test_binaries/libuClibc-0.9.30.so -o 0x00478584

Router-Exploit-Shovel's screenshot

Code structure

ROP chain generation
   This tool uses pattern to generate ROP chains. Extract patterns from common ROP exploitation procedure. Use regex matching to find available gadgets to fill up chain strings. Base64 encoding is to avoid duplicate character escapes. For example:

Attackblocks
   You can get attackblocks generated in results/attackBlocks.txt. Such as:

You might like these similar tools:
Continue reading

  1. Hacker Tools Apk
  2. Hack Tools Online
  3. Pentest Tools List
  4. Pentest Tools Find Subdomains
  5. Hacker Techniques Tools And Incident Handling
  6. Hack Tools For Ubuntu
  7. Hacker Tools Free Download
  8. Pentest Tools Download
  9. Hacker Tools
  10. Hack Apps
  11. World No 1 Hacker Software
  12. Hacking Apps
  13. Hacker Tool Kit
  14. What Is Hacking Tools
  15. Hacking Tools For Pc
  16. Hacking Tools Windows 10
  17. Hacker Security Tools
  18. Pentest Tools Review
  19. Pentest Tools Website Vulnerability

No hay comentarios: