🧰Tools

There are plenty of tools available for binary exploitation. Below are the tools I usually use.

File

The file command is a useful tool that identifies the type of a file by examining its content rather than just relying on its extension. In binary exploitation, it helps determine key details about a binary, such as whether it's 32-bit or 64-bit, dynamically or statically linked, and the architecture it targets.

GDB

GDB is a debugger which is a powerful tool used to analyze and troubleshoot programs by allowing developers to pause execution, inspect memory, and step through code.

sudo apt install gdb

Additionally, you can install GDB plugins such as PEDA, PwnGDB, or GEF to enhance its functionality with features like easier memory inspection, exploit development tools, and visualization aids, making the exploitation process more efficient.

Objdump

Objdump is a tool that displays information about binary files, such as executables or object files. It allows you to examine the structure of a program, including its assembly code, headers, and sections.

sudo apt install binutils # usually pre-installed

Checksec

Checksec is a tool that checks the security protections enabled in a binary file, such as an executable. It helps identify which defense mechanisms, like PIE, NX, or stack canaries, are in place to protect the program from exploitation.

sudo apt install checksec

Ropgadget

ROPGadget is a tool that helps find "gadgets" in a binary for Return-Oriented Programming ROP attacks. These gadgets are small code snippets ending with a ret instruction. ROPGadget streamlines the process of locating these instructions, making exploit development easier.

pip install ropgadget

Pwntools

Pwntools is a versatile Python library designed for exploit development. It offers a range of tools for automating tasks related to binary exploitation, including network communication, process management, and payload crafting.

pip install pwntools

Cyclic

Cyclic is a tool that comes with pwntools and is used to generate unique, non-repeating patterns of characters. In binary exploitation, it’s primarily used to help identify the exact offset at which a program crashes, typically during buffer overflow attacks. By injecting a cyclic pattern into the input, you can analyze where the program overwrites important data, like the return address. After a crash, tools like GDB can help trace back the pattern and pinpoint the exact location in memory, making it easier to craft a precise exploit.