Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/hupe1980/gopwn
Golang CTF framework and exploit development module
https://github.com/hupe1980/gopwn
binary cave ctf ctf-framework elf exploit golang macho pe shellcode
Last synced: 15 days ago
JSON representation
Golang CTF framework and exploit development module
- Host: GitHub
- URL: https://github.com/hupe1980/gopwn
- Owner: hupe1980
- License: mit
- Created: 2021-08-16T07:11:41.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2021-08-31T18:46:31.000Z (over 3 years ago)
- Last Synced: 2024-11-28T17:12:20.617Z (24 days ago)
- Topics: binary, cave, ctf, ctf-framework, elf, exploit, golang, macho, pe, shellcode
- Language: Go
- Homepage:
- Size: 224 KB
- Stars: 27
- Watchers: 4
- Forks: 5
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# gopwn
[](https://pkg.go.dev/github.com/hupe1980/gopwn)
> Golang CTF framework and exploit development module
This module is strictly for educational purposes only. Usage of the methods and tools for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable laws. Developers assume no liability and are not responsible for any misuse or damage caused by this module.
:warning: This is experimental and subject to breaking changes.
## Usage
```go
package main
import (
"bytes"
"fmt"
"github.com/hupe1980/gopwn"
)
func main() {
p, _ := gopwn.NewProcess([]string{"./ctfbinary"})
p.SendLine(append(bytes.Repeat([]byte("A"), 200), gopwn.P32L(0xdeadbeef)...))
out, _ := p.RecvLine()
fmt.Println(string(out))
}
```
### Packing Integers
```go
//32Bit LittelEndian
b := gopwn.P32L(0xdeadbeef)
assert.Equal(t, []byte("\xef\xbe\xad\xde"), b) // true
i := gopwn.U32L([]byte("\xef\xbe\xad\xde"))
assert.Equal(t, uint32(0xdeadbeef), i) // true
```
### Assembly and Disassembly
```go
insn, _ := gopwn.AssembleI386("mov eax, 0")
fmt.Println(gopwn.HexString(insn))
```
Outputs:
```
b800000000
```
```go
assembly, _ := gopwn.DisamI386([]byte("\xb8\x5d\x00\x00\x00"), 0)
fmt.Println(assembly)
```
Outputs:
```
0x0 b8 5d 00 00 00 mov eax, 0x5d
```
### Misc Tools
Generate unique sequences to find offsets in your buffer causing a crash:
```go
assert.Equal(t, []byte("aaaabaaacaaadaaa"), gopwn.Cyclic(16)) // true
assert.Equal(t, 4, gopwn.CyclicFind([]byte("baaa")) // true
```
### Binary Analysis and Manipulation
```go
elf, _ := gopwn.NewELF("./ctfbinary")
```
```go
pe, _ := gopwn.NewPE("./ctfbinary.exe")
```
```go
macho, _ := gopwn.NewMACHO("./ctfbinary")
```
### Documentation
See [godoc](https://pkg.go.dev/github.com/hupe1980/gopwn).
### Examples
See more complete [examples](https://github.com/hupe1980/gopwn/tree/main/_examples).
## CLI
```
gopwn command-line interface
Usage:
gopwn [command]
Available Commands:
cave Search for code caves
checksec Check binary security settings
completion Prints shell autocompletion scripts for gopwn
cyclic Generation of unique sequences
help Help about any command
Flags:
-h, --help help for gopwn
-v, --version version for gopwn
Use "gopwn [command] --help" for more information about a command.
```
### Installing
You can install the pre-compiled binary in several different ways
#### deb/rpm/apk:
Download the .deb, .rpm or .apk from the [releases page](https://github.com/hupe1980/gopwn/releases) and install them with the appropriate tools.
#### manually:
Download the pre-compiled binaries from the [releases page](https://github.com/hupe1980/gopwn/releases) and copy to the desired location.
## License
[MIT](LICENCE)