awesome-repositories.com
博客
awesome-repositories.com

通过 AI 驱动的搜索,发现最优秀的开源仓库。

探索精选搜索开源替代品自托管软件博客网站地图
项目关于排名机制媒体报道MCP 服务器
法律隐私政策服务条款
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·
Gallopsled avatar

Gallopsled/pwntools

0
View on GitHub↗
13,271 星标·1,818 分支·Python·other·7 次浏览pwntools.com↗

Pwntools

Pwntools is a Python-based framework designed for rapid prototyping and automation in binary exploitation, reverse engineering, and security research. It serves as a comprehensive toolkit for interacting with local and remote processes, providing the primitives necessary to manage complex exploit workflows and streamline security analysis tasks.

The framework distinguishes itself through its specialized capabilities for binary manipulation and automated exploit construction. It includes dedicated utilities for parsing executable file formats, assembling and disassembling machine code, and generating shellcode across various architectures. A core strength of the project is its ability to automate the identification and chaining of gadgets to bypass memory protections, as well as its capacity to resolve remote symbols and exploit format string vulnerabilities through calculated memory manipulation.

Beyond its core exploitation features, the library provides a unified interface for managing communication across network sockets, serial connections, and local process pipes. It supports deep integration with debugging environments, allowing researchers to monitor execution flow and inspect memory in real time. The project also includes specific utilities for managing capture-the-flag competition workflows, such as automating the submission of flags to remote servers.

The library is structured to provide a consistent global execution environment, allowing users to configure architecture, operating system, and logging defaults for their research sessions. It is distributed as a Python library, enabling integration into custom security research scripts and automated analysis pipelines.

Features

  • Exploitation Frameworks - Serves as a primary framework for developing, testing, and automating binary exploitation and security research workflows.
  • ROP Chain Automators - Automates the construction of return-oriented programming sequences to bypass security protections.
  • Return Oriented Programming Tools - Analyze binary files to identify gadgets and automatically construct functional exploit chains that bypass security protections like non-executable memory.
  • Capture The Flag Competitions - Automates the submission of captured flags to remote competition servers during security challenges.
  • Gadget Chainers - Automates the identification and chaining of gadgets to bypass memory protections like non-executable memory.
  • Exploitability Validation - Automates the discovery and exploitation of memory corruption vulnerabilities in compiled software.
  • Binary Format Parsers - Includes structured parsers for extracting symbols and metadata from executable binary files.
  • Binary Analysis Capabilities - Parses and manipulates binary file formats to resolve symbols and automate exploitation.
  • Exploit Connectivity Tools - Establishes and manages connections to local processes, network sockets, or serial ports for security research.
  • Return Oriented Programming - Identifies gadgets and automatically assembles them into functional chains to bypass memory protections.
  • Challenge Solving Utilities - Streamlines interaction with remote services and automates flag submission for security competitions.
  • Security Payload Generators - Generates architecture-specific machine code and shellcode for exploit payloads.
  • Exploit Payloads - Manages exploit payloads by encoding shellcode and generating cyclic patterns for buffer overflow analysis.
  • Format String Exploiters - Automates the exploitation of format string vulnerabilities by calculating necessary memory writes and offsets.
  • Binary Data Packers - Packs binary data and generates cyclic patterns to assist in the analysis of buffer overflows.
  • Task Automation Tools - Streamlines security research workflows by automating format string exploitation and memory leaking tasks.
  • Remote Service Clients - Manages communication channels with local and remote services to exchange data and monitor execution.
  • Shellcode Generators - Generates architecture-specific shellcode and machine code for exploit payload construction.
  • Binary File Inspectors - Analyzes executable file formats to extract information and construct return-oriented programming chains.
  • Reverse Engineering Tools - Provides comprehensive utilities for disassembling, analyzing, and reverse engineering compiled binary executables.
  • Data Endianness - Provides utilities for translating between high-level data types and raw byte sequences with configurable endianness.
  • Stream Abstractions - Provides a consistent interface for reading and writing data across network sockets, serial connections, and local pipes.
  • Process Debuggers - Interfaces with external debuggers to monitor execution flow and inspect memory in real time.
  • Exploit Development - Rapid framework for exploit development and CTF challenges.
  • Binary Exploitation - Provides a library for CTF challenges and exploit development.
  • Exploitation Frameworks - Comprehensive framework for writing security exploits.
  • Security Tools - CTF framework and exploit development library.
  • Format String Exploiters - Automates the calculation of memory writes required to exploit format string vulnerabilities.
  • Command Line Utilities - Provides command-line utilities for assembly, disassembly, and binary analysis to assist in exploit development.
  • Interactive Remote Access - Maintains active communication channels with target processes for manual or automated interaction.
  • Binary Analysis Tools - Offers a suite of tools for parsing, inspecting, and extracting information from compiled binary files.
  • Binary Disassembly - Provides tools for assembling, disassembling, and patching machine code to support reverse engineering.
  • Symbol Resolution Engines - Automates the discovery of function addresses by leaking and parsing binary structures in running processes.
  • Offline-First API Client with Sync - Transmits payloads and captures responses from remote or local services for testing and research.
  • Cyclic Pattern Generators - Generates unique cyclic patterns to identify exact offsets in memory buffers during crash analysis.
  • Remote Symbol Resolvers - Resolves remote function addresses by leaking and analyzing binary structures during runtime.
  • Automation Utilities - Automates interaction with remote services and streamlines the submission of flags during security challenges.
  • Data Format Converters - Translates between integers and byte strings with configurable endianness and bit-width for target architecture compatibility.
  • Security Research Toolkits - Provides primitives for debugging processes, managing payloads, and researching security vulnerabilities.
  • Memory Manipulation Utilities - Provides utilities for modifying memory state in running processes to facilitate exploit testing and debugging.

Star 历史

gallopsled/pwntools 的 Star 历史图表gallopsled/pwntools 的 Star 历史图表

AI 搜索

探索更多 awesome 仓库

用简单的语言描述您的需求 —— AI 将根据相关性为您从数千个精选开源项目中进行排序。

Start searching with AI

Pwntools 的开源替代方案

相似的开源项目,按与 Pwntools 的功能重合度排序。
  • longld/pedalongld 的头像

    longld/peda

    6,130在 GitHub 上查看↗

    Peda is a security tool suite and exploit development framework designed for binary analysis, debugger automation, and memory inspection. It functions as a set of Python scripts that extend a debugger to automate the analysis of compiled files and the inspection of process memory. The project provides specialized utilities for memory corruption research, including a payload generation utility for creating cyclic patterns to discover buffer overflows and a gadget finder to locate return-oriented programming sequences within binaries. It differentiates itself by offering a visualization tool th

    Python
    在 GitHub 上查看↗6,130
  • radare/radare2radare 的头像

    radare/radare2

    24,129在 GitHub 上查看↗

    radare2 is a reverse engineering framework and binary analysis toolset. It functions as a multi-architecture disassembler, low-level binary debugger, and hexadecimal editor for inspecting executable structures and interpreting machine code when original source files are unavailable. The framework provides capabilities for decompiling machine instructions, performing symbolic analysis, and diffing binary files to identify structural changes across versions. It also includes a digital forensic analyzer and disk analyzer for browsing filesystem formats in userland. The toolset supports binary p

    C
    在 GitHub 上查看↗24,129
  • pwndbg/pwndbgpwndbg 的头像

    pwndbg/pwndbg

    10,051在 GitHub 上查看↗

    pwndbg is a GDB plugin and binary analysis framework designed for reverse engineering, exploit development, and low-level program analysis. It extends the core functionality of the debugger to provide advanced memory inspection and automation tools. The project distinguishes itself with specialized capabilities for heap analysis across glibc, jemalloc, and musl, as well as a comprehensive kernel debugging toolkit for inspecting Linux kernel tasks and slab allocators. It includes an integrated ROP gadget searcher for constructing exploit chains and an LLM-powered debugging assistant that provi

    Pythonbinary-ninjacapture-the-flagctf
    在 GitHub 上查看↗10,051
  • jonathansalwan/ropgadgetJonathanSalwan 的头像

    JonathanSalwan/ROPgadget

    4,440在 GitHub 上查看↗

    ROPgadget is a binary analysis tool and multi-architecture disassembler designed to locate instructional sequences used for return-oriented programming. It functions as an exploit development framework that identifies gadgets within binaries to facilitate the creation of memory corruption exploits. The tool supports cross-architecture binary auditing, processing machine code from x86, ARM, MIPS, and RISC-V. It provides a unified interface for analyzing diverse executable file formats, including ELF, PE, and Mach-O. Its capabilities cover binary vulnerability analysis and exploit payload deve

    Python
    在 GitHub 上查看↗4,440
查看 Pwntools 的所有 30 个替代方案→

常见问题解答

gallopsled/pwntools 是做什么的?

Pwntools is a Python-based framework designed for rapid prototyping and automation in binary exploitation, reverse engineering, and security research. It serves as a comprehensive toolkit for interacting with local and remote processes, providing the primitives necessary to manage complex exploit workflows and streamline security analysis tasks.

gallopsled/pwntools 的主要功能有哪些?

gallopsled/pwntools 的主要功能包括:Exploitation Frameworks, ROP Chain Automators, Return Oriented Programming Tools, Capture The Flag Competitions, Gadget Chainers, Exploitability Validation, Binary Format Parsers, Binary Analysis Capabilities。

gallopsled/pwntools 有哪些开源替代品?

gallopsled/pwntools 的开源替代品包括: longld/peda — Peda is a security tool suite and exploit development framework designed for binary analysis, debugger automation, and… radare/radare2 — radare2 is a reverse engineering framework and binary analysis toolset. It functions as a multi-architecture… pwndbg/pwndbg — pwndbg is a GDB plugin and binary analysis framework designed for reverse engineering, exploit development, and… jonathansalwan/ropgadget — ROPgadget is a binary analysis tool and multi-architecture disassembler designed to locate instructional sequences… aquynh/capstone — Capstone is a multi-architecture disassembly framework and binary translation system. It converts binary machine code… rapid7/metasploit-framework — The framework is a comprehensive penetration testing platform designed for the development, testing, and execution of…