An Exploit object represents the successful application of an exploit technique to a crash state. It contains the logic for extracting an un

Extend WaitAction with a render function

An action that interacts with remote shell after a shell is popped

Extend OpenChannelAction with a render function

Extend SendAction with a render function

This state plugin keeps track of the reads and writes to symbolic addresses

A dummy taint for input-to-state analysis

Exploit factory for CGC challenges

A CGC type1 exploit object, which sets a register via Rop.

A CGC type1 exploit object, which sets a register via Rop.

A CGC type1 exploit object, which sets a register via shellcode.

A CGC type2 exploit object, which leaks memory at an address using rop.

A CGC type2 exploit object, which leaks the memory contents at an address with shellcode.

An exploit that crashes with a controlled instruction pointer and register

generate a coredump 1 block before crashing, identify the crash input and then replace the crash input with symbolic data FIXME: assumpti

Managing and creating exploits.

automatically identify where user input is read and then generate coredump from here TODO: it's not automated yet, user needs to specify the

Extend CloseChannelAction with a render function

A scripter object that translates rex actions into standalone exploit scripts

Shellcode manager, manages preferences for shellcode types and in the future, their options :ivar os: Platform of this shellcode facto

Some basic functionalities: handles angrop

A CGC exploit object, offers more flexibility than an Exploit object for the sake of the game. https://github.com/CyberGrandChallenge/cgc

A CGC exploit object, offers more flexibility than an Exploit object for the sake of the game. This should represent a Type 1 POV by allowing

A CGC exploit object, offers more flexibility than an Exploit object for the sake of the game. This should represent a Type 2 POV: https:

A CGC type2 exploit object, which leaks memory from the flag page Might be generated circumstantially or through another technique

An exploit that leaks some data. Contains logic for extracting and formatting data from output stream. For now leaks are specified as tuples

Even more advanced crash object handling target communication and tracing

Triage and exploit a crash using angr. The highest level crash object, perform analysis on the crash state.

A class that feeds data to a socket port

A technique to ROP and invoke system in libc

extend archr.action with a render function that translates each interaction action to code snippet

Very CGC specific leaking technique

Very CGC specific register setting technique, does a lot of special stuff to make sure the value the register is set to is flexible.

Base class of all shellcode snippets. :ivar list os: All OSes that this piece of shellcode applies to. :ivar archses: All arch

Advanced crash object handling symbolic states

Represents an exploitation technique.