Skip to main content

Router-Exploit-Shovel: An Automated Application Generator For Stack Overflow Types On Wireless Routers

By admin
About Router-Exploit-Shovel
   Router-Exploit-Shovel is an automated application generation for Stack Overflow types on Wireless Routers.

   Router exploits shovel is an automated application generation tool for stack overflow types on wireless routers. The tool implements the key functions of exploits, it can adapt to the length of the data padding on the stack, generate the ROP chain, generate the encoded shellcode, and finally assemble them into a complete attack code. The user only needs to attach the attack code to the overflow location of the POC to complete the Exploit of the remote code execution.

   The tool supports MIPSel and MIPSeb.Run on Ubuntu 16.04 64bit.

Router-Exploit-Shovel's Installation
   Open your Terminal and enter these commands:
Usage

   Example: python3 Router_Exploit_Shovel.py -b test_binaries/mipseb-httpd -l test_binaries/libuClibc-0.9.30.so -o 0x00478584

Router-Exploit-Shovel's screenshot

Code structure

ROP chain generation
   This tool uses pattern to generate ROP chains. Extract patterns from common ROP exploitation procedure. Use regex matching to find available gadgets to fill up chain strings. Base64 encoding is to avoid duplicate character escapes. For example:

Attackblocks
   You can get attackblocks generated in results/attackBlocks.txt. Such as:

You might like these similar tools:

Related news


Comments

Post a Comment

Popular posts from this blog

鄭子璉 | 個人隨寫

By admin
https://tlcheng.wordpress.com/%e9%97%9c%e6%96%bc/ https://tlcheng.wordpress.com/%e8%87%aa%e7%94%b1%e7%95%99%e8%a8%80/ https://tlcheng.wordpress.com/ https://tlcheng.wordpress.com/page/2/ https://tlcheng.wordpress.com/2019/08/21/sql-server-%e8%b3%87%e6%96%99%e5%ba%ab%e6%90%8d%e6%af%80%e8%88%87%e4%bf%ae%e5%be%a9/ https://tlcheng.wordpress.com/author/tlcheng/ https://tlcheng.files.wordpress.com/2019/08/19133007_info_dbcc_825_01.png https://tlcheng.files.wordpress.com/2019/08/19134221_fail_dbcc_8646.png https://tlcheng.files.wordpress.com/2019/08/19140935_fail_dbcc_824.png https://tlcheng.files.wordpress.com/2019/08/19153642_info_dbcc_8957_01.png https://tlcheng.files.wordpress.com/2019/08/19160231_fail_lock_1204.png https://tlcheng.files.wordpress.com/2019/08/19160326_info_dbcc_825_02.png https://tlcheng.files.wordpress.com/2019/08/20232545_info_dbcc_8957_02.png https://tlcheng.files.wordpress.com/2019/08/20234545_info_dbcc_8957_03.png https://tlcheng.files.wordpress.com/2019/08/20235716_...
Post a Comment
Read more

5525 Interesting News

By admin
TikTok Restoring Service for U.S. Users, After Trump Signals He Will Save It The pandemic has changed the shape of global happiness The "Scream" franchise adds another self-referential sequel Millions of Chinese people play guandan. Is that good or bad? A theatre in Jenin offers a different kind of Palestinian resistance Economic data, commodities and markets Covid-19 has shone a light on racial disparities in health Is Syria's drug-dealing dictator coming in from the cold? Female soldiers are changing how armed forces work This Tool Probes Frontier AI Models for Lapses in Intelligence How much cash should be removed from the financial system? Can the voluntary carbon market save the Amazon? File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add This week's cover War in space is no longer science fiction The best Apple deals you can get right now: Save on Apple TV+, AirPods, iPads and more Trump's Agg...
Post a Comment
Read more

9774 hash passwords

By admin
blake2b-256(jade41) blake2b-256(jade420) blake2b-256(jade429) blake2b-256(jade44) blake2b-256(jade456) blake2b-256(jade4ever69) blake2b-256(jade50) blake2b-256(jade5264) blake2b-256(jade555) blake2b-256(jade5565) blake2b-256(jade69) blake2b-256(Jade69) blake2b-256(jade98) blake2b-256(jadebaby11121) blake2b-256(jadebink) blake2b-256(jadeblue) blake2b-256(jadecape) blake2b-256(jadeck) blake2b-256(jadeclub) blake2b-256(jaded) blake2b-256(jaded1) blake2b-256(jaded2) blake2b-256(jaded69) blake2b-256(jadedbaby) blake2b-256(jadedd) blake2b-256(jadedragonflower) blake2b-256(jadeds) blake2b-256(jadeduck) blake2b-256(jadeee) blake2b-256(jadeeeee) blake2b-256(jadefox) blake2b-256(jadehungder) blake2b-256(jadejade) blake2b-256(jadejord) blake2b-256(jadejs) blake2b-256(jadeland) blake2b-256(jadelilly) blake2b-256(jadelugo) blake2b-256(jadelyn) blake2b-256(jadelynn) blake2b-256(jadelynp) blake2b-256(jaden) blake2b-256(jaden0) blake2b-256(jaden1) blake2b-2...
Post a Comment
Read more