mirror of
https://github.com/Ed1s0nZ/CyberStrikeAI.git
synced 2026-08-14 07:00:23 +02:00
Add files via upload
This commit is contained in:
+46
-40
@@ -1,62 +1,68 @@
|
||||
name: "pwntools"
|
||||
command: "python3"
|
||||
args:
|
||||
- "-c"
|
||||
- |
|
||||
import os
|
||||
import sys
|
||||
|
||||
if len(sys.argv) < 2:
|
||||
sys.stderr.write("缺少脚本内容\n")
|
||||
sys.exit(1)
|
||||
|
||||
script_content = sys.argv[1]
|
||||
target_binary = sys.argv[2] if len(sys.argv) > 2 else ""
|
||||
target_host = sys.argv[3] if len(sys.argv) > 3 else ""
|
||||
target_port = sys.argv[4] if len(sys.argv) > 4 else ""
|
||||
exploit_type = sys.argv[5] if len(sys.argv) > 5 else "local"
|
||||
|
||||
if target_binary:
|
||||
os.environ["PWN_BINARY"] = target_binary
|
||||
if target_host:
|
||||
os.environ["PWN_HOST"] = target_host
|
||||
if target_port:
|
||||
os.environ["PWN_PORT"] = str(target_port)
|
||||
if exploit_type:
|
||||
os.environ["PWN_EXPLOIT_TYPE"] = exploit_type
|
||||
|
||||
exec(script_content, {})
|
||||
enabled: true
|
||||
|
||||
short_description: "CTF和漏洞利用开发框架"
|
||||
|
||||
description: |
|
||||
Pwntools是一个CTF和漏洞利用开发框架,用于快速开发漏洞利用程序。
|
||||
|
||||
**主要功能:**
|
||||
- 漏洞利用开发
|
||||
- 自动化脚本
|
||||
- 网络交互
|
||||
- 二进制分析辅助
|
||||
|
||||
**使用场景:**
|
||||
- CTF挑战
|
||||
- 漏洞利用开发
|
||||
- 二进制分析
|
||||
- 安全研究
|
||||
|
||||
执行自定义pwntools脚本,并通过环境变量注入常用目标信息:
|
||||
- `PWN_BINARY`, `PWN_HOST`, `PWN_PORT`, `PWN_EXPLOIT_TYPE`
|
||||
parameters:
|
||||
- name: "script_content"
|
||||
type: "string"
|
||||
description: "Python脚本内容(使用pwntools)"
|
||||
required: true
|
||||
|
||||
position: 0
|
||||
format: "positional"
|
||||
- name: "target_binary"
|
||||
type: "string"
|
||||
description: "本地二进制文件路径"
|
||||
description: "本地二进制文件路径(注入PWN_BINARY)"
|
||||
required: false
|
||||
|
||||
default: ""
|
||||
position: 1
|
||||
format: "positional"
|
||||
- name: "target_host"
|
||||
type: "string"
|
||||
description: "远程主机地址"
|
||||
description: "远程主机地址(PWN_HOST)"
|
||||
required: false
|
||||
|
||||
default: ""
|
||||
position: 2
|
||||
format: "positional"
|
||||
- name: "target_port"
|
||||
type: "int"
|
||||
description: "远程端口"
|
||||
type: "string"
|
||||
description: "远程端口(PWN_PORT)"
|
||||
required: false
|
||||
|
||||
default: ""
|
||||
position: 3
|
||||
format: "positional"
|
||||
- name: "exploit_type"
|
||||
type: "string"
|
||||
description: "漏洞利用类型(local, remote, format_string, rop)"
|
||||
description: "漏洞利用类型标签(PWN_EXPLOIT_TYPE)"
|
||||
required: false
|
||||
default: "local"
|
||||
|
||||
- name: "additional_args"
|
||||
type: "string"
|
||||
description: |
|
||||
额外的pwntools参数。用于传递未在参数列表中定义的pwntools选项。
|
||||
|
||||
**示例值:**
|
||||
- 根据工具特性添加常用参数示例
|
||||
|
||||
**注意事项:**
|
||||
- 多个参数用空格分隔
|
||||
- 确保参数格式正确,避免命令注入
|
||||
- 此参数会直接追加到命令末尾
|
||||
required: false
|
||||
format: "positional"
|
||||
position: 4
|
||||
format: "positional"
|
||||
|
||||
Reference in New Issue
Block a user