Skip to content

PakCyberbot/Buffer-Overflow-Assistant

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

20 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Buffer-Overflow(BOF)-Assistant

This program is not fully automated. It's just the helper during stack-based buffer-overflow exploitation. BOF-Assistant Interface

  • It can automatically copy Mona commands in your clipboard to directly paste in Immunity Debugger Automatic Copy to clipboard

  • It can use your bash shell to generate payloads from Metasploit

  • It also informs you about each stage of Buffer-Overflow Exploitation

  • This program has different text colors for different function.

    • Restart Vulnerable Application : Red Restarting
    • Taking User Input : Blue Taking Input
    • Text that automatically copied to your Clipboard : Green Clipboard
    • Placeholder in the command : BLUE Background PlaceHolder
  • You can directly do exploitation of the target program using -e/--exploit flag, if you know EIP offset, Bad Chars, and Jump point. Direct Exploit

  • You can generate the portable exploit python program too to directly exploit the target without providing any values. Generate Exploit

Complete the requirements for this program

pip install -r requirements.txt

Start your BOF-Assistant

python3 BOF-Assistant.py <IP> <Port>

For Explanation:

Explanations

Note:

This project is for educational purposes. I didn't explain the stack-based buffer-overflow, you can learn it from the below links.

Credits

You can learn Buffer-Overflow from TryHackMe room created by @Tib3rius: https://tryhackme.com/room/bufferoverflowprep

This Repository created by @Tib3rius helped me to create this Assistant: https://github.com/Tib3rius/Pentest-Cheatsheets/blob/master/exploits/buffer-overflows.rst

You can follow me on:

About

This is the helper Program for the Stack-based Buffer-Overflow Attack named Bofy.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages