Giter VIP home page Giter VIP logo

pwndocker's Introduction

Pwndocker

A docker environment for pwn in ctf based on phusion/baseimage, which is a modified ubuntu 16.04 baseimage for docker. I forked and magic changed by pwndocker

Usage

git clone https://github.com/TacXingXing/Pwndocker
cd Pwndocker
docker build -t pwndocker .
docker run -it -v -v $(pwd)/${ctf_name}:/ctf/work -p 23946:23946 --privileged --cap-add=SYS_PRTACE pwndocker

included software

  • pwntools —— CTF framework and exploit development library
  • pwndbg —— a GDB plug-in that makes debugging with GDB suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers
  • pwngdb —— gdb for pwn
  • ROPgadget —— facilitate ROP exploitation tool
  • roputils —— A Return-oriented Programming toolkit
  • one_gadget —— A searching one-gadget of execve('/bin/sh', NULL, NULL) tool for amd64 and i386
  • angr —— A platform-agnostic binary analysis framework
  • radare2 —— A rewrite from scratch of radare in order to provide a set of libraries and tools to work with binary files
  • welpwn —— designed to make pwnning an art, freeing you from dozens of meaningless jobs.
  • linux_server[64] —— IDA 7.0 debug server for linux
  • tmux —— a terminal multiplexer
  • ltrace —— trace library function call
  • strace —— trace system call

added softwares

  • zsh && oh-my-zsh -- A delightful community-driven (with 1,300+ contributors) framework for managing your zsh configuration.
  • peda -- Python Exploit Development Assistance for GDB
  • socat -- A relay for bidirectional data transfer between two independent data channels.
  • z3 -- Theorem Prover
  • seccomp-tools -- Provide powerful tools for seccomp analysis
  • qemu -- QEMU is a generic and open source machine emulator and virtualizer. .gdbinit .zshrc .tmux.conf

included glibc

Default compiled glibc path is /glibc.

  • 2.19 —— ubuntu 12.04 default libc version
  • 2.23 —— pwndocker default libc version
  • 2.24 —— introduce vtable check in file struct
  • 2.27 —— intruduce tcache in heap (since 2.26)
  • 2.28 —— new libc version ubuntu19.04
  • 2.29 —— new libc version ubuntu19.04
  • 2.30 —— new libc version ubuntu19.10
  • 2.31 —— new libc version ubuntu20.04

include multiarch libraries

  • arm -- gcc-5-arm-linux-gnueabi
  • aarch64 -- gcc-5-aarch64-linux-gnu
  • mips -- gcc-5-mips-linux-gnu
  • mipsel -- gcc-5-mipsel-linux-gnu
  • mips64 -- gcc-5-mips64-linux-gnuabi64
  • mips64el -- gcc-5-mips64el-linux-gnuabi64
  • powerpc -- gcc-5-powerpc-linux-gnu
  • powerpc64 -- gcc-5-powerpc64-linux-gnu
  • powerpc64le -- gcc-5-powerpc64le-linux-gnu

How to run in custom libc version?

cp /glibc/2.27/64/lib/ld-2.27.so /tmp/ld-2.27.so
patchelf --set-interpreter /tmp/ld-2.27.so ./test
LD_PRELOAD=./libc.so.6 ./test

or

from pwn import *
p = process(["/path/to/ld.so", "./test"], env={"LD_PRELOAD":"/path/to/libc.so.6"})

Others

If you really have some new and useful tools need to add in the pwndocker, please submit issue, thanks.

pwndocker's People

Watchers

James Cloos avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.