{"id":43705913,"url":"https://github.com/heimao-box/pwnpasi","last_synced_at":"2026-02-16T16:00:36.027Z","repository":{"id":279329934,"uuid":"938459755","full_name":"heimao-box/pwnpasi","owner":"heimao-box","description":"This tool is an automated PWN exploitation framework designed for CTF competitions and binary vulnerability exploitation. It integrates various exploitation techniques such as stack overflow and format string attacks, supporting automated analysis and exploitation for both 32-bit and 64-bit programs.","archived":false,"fork":false,"pushed_at":"2025-10-28T08:12:53.000Z","size":229,"stargazers_count":270,"open_issues_count":9,"forks_count":23,"subscribers_count":4,"default_branch":"main","last_synced_at":"2025-10-28T10:04:57.664Z","etag":null,"topics":["ctf","exploit","fmtstr","overflow","pwn","stackoverflow","tools"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/heimao-box.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-02-25T01:48:42.000Z","updated_at":"2025-10-28T08:37:41.000Z","dependencies_parsed_at":"2025-09-11T10:30:50.470Z","dependency_job_id":"abf9d10a-370c-4492-8c44-9fc2262f138a","html_url":"https://github.com/heimao-box/pwnpasi","commit_stats":null,"previous_names":["heimao-box/pwnpasi"],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/heimao-box/pwnpasi","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/heimao-box%2Fpwnpasi","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/heimao-box%2Fpwnpasi/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/heimao-box%2Fpwnpasi/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/heimao-box%2Fpwnpasi/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/heimao-box","download_url":"https://codeload.github.com/heimao-box/pwnpasi/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/heimao-box%2Fpwnpasi/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29512225,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-16T09:05:14.864Z","status":"ssl_error","status_checked_at":"2026-02-16T08:55:59.364Z","response_time":115,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ctf","exploit","fmtstr","overflow","pwn","stackoverflow","tools"],"created_at":"2026-02-05T06:00:17.292Z","updated_at":"2026-02-16T16:00:36.021Z","avatar_url":"https://github.com/heimao-box.png","language":"Python","funding_links":[],"categories":["CTF相关"],"sub_categories":[],"readme":"\u003cdiv align=\"center\"\u003e\n\n# 🚀 PwnPasi 3.1\n\n**Professional Automated Binary Exploitation Framework**\n\n[![Version](https://img.shields.io/badge/version-3.0-blue.svg)](https://github.com/heimao-box/pwnpasi)\n[![Python](https://img.shields.io/badge/python-3.6+-green.svg)](https://www.python.org/)\n[![License](https://img.shields.io/badge/license-MIT-red.svg)](LICENSE)\n[![Platform](https://img.shields.io/badge/platform-Linux%20%7C%20macOS-lightgrey.svg)](https://github.com/heimao-box/pwnpasi)\n\n\n\u003c/div\u003e\n\n---\n\n## 🎯 What is PwnPasi?\n\nPwnPasi is a **cutting-edge automated binary exploitation framework** designed for CTF competitions and security research, PwnPasi transforms complex binary exploitation into an automated, streamlined process.\n\n### ✨ Key Features\n\n🔍 **Smart Vulnerability Detection**\n- Automatic stack overflow detection with dynamic padding calculation\n- Format string vulnerability identification and exploitation\n- Binary protection analysis (RELRO, Stack Canary, NX, PIE)\n- Assembly code analysis for vulnerable function detection\n- Automatically generating reports\n\n⚡ **Advanced Exploitation Techniques**\n- **ret2system**: Direct system function calls\n- **ret2libc**: ASLR bypass through libc address leaking\n- **ROP Chain Construction**: Automated gadget discovery and chaining\n- **Syscall Exploitation**: execve system call chains\n- **Shellcode Injection**: RWX segment exploitation\n- **Stack Canary Bypass**: Format string canary leaking\n- **PIE Bypass**: Position Independent Executable circumvention\n\n🏗️ **Multi-Architecture Support**\n- **x86 (32-bit)**: Complete 32-bit exploitation chains\n- **x86_64 (64-bit)**: Full 64-bit exploitation support\n- **Auto-detection**: Intelligent architecture recognition\n\n🌐 **Flexible Deployment**\n- **Local Mode**: Direct binary file exploitation\n- **Remote Mode**: Network service targeting\n- **Hybrid Approach**: Seamless local-to-remote transition\n\n---\n\n## 🚀 Quick Start\n\n### Installation\n\n```bash\n# Clone the repository\ngit clone https://github.com/heimao-box/pwnpasi.git\ncd pwnpasi\n\n# Run the automated setup\npython setup.py\n```\n\nThe setup script will automatically:\n- Install system dependencies (Kali/Debian)\n- Set up Python packages (pwntools, LibcSearcher, ropper)\n- Configure the environment\n- Add pwnpasi to system PATH (optional)\n\n### Basic Usage\n\n```bash\n# Analyze local binary\npython pwnpasi.py -l ./target_binary\n\n# Remote exploitation\npython pwnpasi.py -l ./binary -ip 192.168.1.100 -p 9999\n\n# Custom libc and padding\npython pwnpasi.py -l ./binary -libc ./libc-2.19.so -f 112\n```\n\n---\n\n## 💡 Usage Examples\n\n### 🎪 Local Binary Analysis\n```bash\n# Comprehensive local analysis\npython pwnpasi.py -l ./vuln_binary\n```\n\n### 🌍 Remote Service Exploitation\n```bash\n# Target remote CTF service\npython pwnpasi.py -l ./local_binary -ip ctf.example.com -p 31337\n```\n\n### 🔧 Advanced Configuration\n```bash\n# Specify custom libc and manual padding\npython pwnpasi.py -l ./binary -libc /lib/x86_64-linux-gnu/libc.so.6 -f 88 -v\n```\n\n---\n\n## 📋 Command Line Options\n\n| Option | Description | Example |\n|--------|-------------|----------|\n| `-l, --local` | Target binary file (required) | `-l ./vuln_app` |\n| `-ip, --ip` | Remote target IP address | `-ip 192.168.1.100` |\n| `-p, --port` | Remote target port | `-p 9999` |\n| `-libc, --libc` | Custom libc file path | `-libc ./libc-2.27.so` |\n| `-f, --fill` | Manual overflow padding size | `-f 112` |\n| `-v, --verbose` | Enable verbose output | `-v` |\n\n---\n\n## 🛠️ Technical Arsenal\n\n### Core Dependencies\n- **pwntools** - The ultimate CTF framework\n- **LibcSearcher** - Libc database and version detection\n- **ropper** - Advanced ROP gadget discovery\n- **checksec** - Binary security feature analysis\n\n### System Tools Integration\n- **objdump** - Assembly analysis and disassembly\n- **strings** - String extraction and analysis\n- **ldd** - Dynamic library dependency mapping\n- **gdb** - Advanced debugging capabilities\n\n---\n\n## 🎨 Output Preview\n\n\n\nhttps://github.com/user-attachments/assets/1395d646-eeeb-4342-8b93-e05eed282b92\n\n\n\n---\n\n## 🏆 Why Choose PwnPasi?\n\n### 🎯 **Precision \u0026 Automation**\nNo more manual gadget hunting or address calculation. PwnPasi automates the entire exploitation pipeline with surgical precision.\n\n### 🚀 **Speed \u0026 Efficiency**\nFrom vulnerability detection to shell acquisition in seconds, not hours. Perfect for time-critical CTF scenarios.\n\n### 🧠 **Intelligence \u0026 Adaptability**\nSmart fallback mechanisms ensure maximum success rate across different binary configurations and protection schemes.\n\n---\n\n## 🤝 Contributing\n\nWe welcome contributions! Whether it's:\n- 🐛 Bug reports and fixes\n- ✨ New exploitation techniques\n- 📚 Documentation improvements\n- 🔧 Performance optimizations\n\n---\n\n## 📜 License\n\nThis project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.\n\n---\n\n## ⚠️ Disclaimer\n\nPwnPasi is designed for **educational purposes** and **authorized security testing** only. Users are responsible for ensuring compliance with applicable laws and regulations. The developers assume no liability for misuse of this tool.\n\n---\n\n\u003cdiv align=\"center\"\u003e\n\n**Made with ❤️ by Ba1_Ma0**\n\n*Star ⭐ this repo if PwnPasi helped you pwn some binaries!*\n\n\u003c/div\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fheimao-box%2Fpwnpasi","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fheimao-box%2Fpwnpasi","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fheimao-box%2Fpwnpasi/lists"}