Learn how to pwn badly written programs
A tool that teaches how to pwn.
Pwn School teaches how to pwn applications with errors such as off-by-one, helps to understand stack- and heap-overflows.
Learn why:
- data buffers should always be big enough, no matter whether placed on stack, on heap or anywhere else
- user-input is to be double-, or even triple-checked before being considered safe
- functions marked as unsafe are really unsafe
- many many more...
make
libopenssl
- sample solutions are using Python 2.x with
pwntools
, recommended are alsopeda
andropper
. To install them all usingpip
, just type:
pip install pwn peda ropper
- if python module capstone complains about its shared library, install its new version using
pip install capstone==3.0.5rc2
make && make install