This program is not fully automated. It's just the helper during stack-based buffer-overflow exploitation.
-
It can automatically copy Mona commands in your clipboard to directly paste in Immunity Debugger
-
It can use your bash shell to generate payloads from Metasploit
-
It also informs you about each stage of Buffer-Overflow Exploitation
-
This program has different text colors for different function.
-
You can directly do exploitation of the target program using -e/--exploit flag, if you know EIP offset, Bad Chars, and Jump point.
-
You can generate the portable exploit python program too to directly exploit the target without providing any values.
pip install -r requirements.txt
python3 BOF-Assistant.py <IP> <Port>
- You can check out my Article on how I created this program: Code Explanation
- You can check out my demonstration Video of this program: Demonstration of the Program
This project is for educational purposes. I didn't explain the stack-based buffer-overflow, you can learn it from the below links.
You can learn Buffer-Overflow from TryHackMe room created by @Tib3rius: https://tryhackme.com/room/bufferoverflowprep
This Repository created by @Tib3rius helped me to create this Assistant: https://github.com/Tib3rius/Pentest-Cheatsheets/blob/master/exploits/buffer-overflows.rst
You can follow me on:
- YouTube: https://youtube.com/@PakCyberbot
- Twitter: https://twitter.com/PakCyberbot
- LinkedIn: https://www.linkedin.com/in/pakcyberbot/
- Medium: https://pakcyberbot.medium.com/
- Instagram: https://www.instagram.com/pakcyberbot/