objection
pwntools
objection | pwntools | |
---|---|---|
17 | 8 | |
7,012 | 11,498 | |
1.2% | 1.0% | |
1.6 | 9.1 | |
7 days ago | 4 days ago | |
Python | Python | |
GNU General Public License v3.0 only | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
objection
- apk.sh, make reverse engineering Android apps easier!
- Prerequisites for reverse engineering?
-
Mitmproxy 8
This is true, by default Android apps do not trust user-installed certificate authorities. IMO the easiest solution if you're doing security testing on a dedicated device is MagiskTrustUserCerts[1]. If you're not testing on a dedicated device or you don't want to root the device, I'd recommend using the objection[2] tool which has a guided mode for patching an apk, and you can modify the manifest to add your CA or to trust all user-installed CAs.
[1]: https://github.com/NVISOsecurity/MagiskTrustUserCerts
[2]: https://github.com/sensepost/objection/wiki/Patching-Android...
-
Is this networking knowledge enough ?
Then use runtime tools like Runtime Mobile Security, Grapefruit, and Objection to see stuff in action and practice Frida along with as these tools usually support loading custom Frida scripts.
-
Okhttp3 SSL pinning bypass
you might have more luck in some whitehat hacking groups etc. ive used https://github.com/sensepost/objection to try out my own app.
-
Beststar all songs + unlimited play v1.1
In some form yes. Internally this is just a Frida gadget script which you can see here does support IOS.
pwntools
-
PwnTools for Exploit Development
The Pwntools library stands out as a sophisticated toolset for CTF enthusiasts and security researchers. It aids in creating and executing shellcode, designing payloads, and interacting with remote processes. For instance, the context feature allows developers to switch between different architectures effortlessly, while the 'tube' module streamlines the communication between local and remote processes. And it's not just limited to Linux; the library has support for various platforms including Windows, making it versatile and comprehensive.
-
unable to install pwntools on mac m1
you have to remove the unicorn dependency from the setup.py because doesn't support m1 git clone https://github.com/Gallopsled/pwntools cd pwntools sed -i'' '/unicorn/d' setup.py pip install --upgrade .
-
Awesome CTF : Top Learning Resource Labs
Pwntools - CTF Framework for writing exploits.
-
Awesome Penetration Testing
Pwntools - Rapid exploit development framework built for use in CTFs.
-
Not sure if belongs here
Pwntools is a thing.
-
What is Calypso?
One library that I may eventually make which will probably not be an officially maintained library but which I will maintain myself will be a partial or full port of pwntools (a library written in Python for CTFs) to Calypso. For more information on CTFs, atan made a pretty cool post about them:
- Use pwntools for your exploits
-
anybody know good packet crafting resources?
Scapy is great if you're attacking low level networking protocol stacks like TCP/IP or UDP. In that case, you may be modifying packet headers and such. Otherwise, it's much easier to just use the Python socket module and craft your custom payload in Python. Even better is the pwntools module.
What are some alternatives?
frida - Clone this repo to build Frida
Metasploit - Metasploit Framework
drozer - The Leading Security Assessment Framework for Android.
pwndbg - Exploit Development and Reverse Engineering with GDB Made Easy
Free-RASP-Community - SDK providing app protection and threat monitoring for mobile devices, available for Flutter, Cordova, Android and iOS.
one_gadget - The best tool for finding one gadget RCE in libc.so.6
awesome-frida - Awesome Frida - A curated list of Frida resources http://www.frida.re/ (https://github.com/frida/frida)
angr - A powerful and user-friendly binary analysis platform!
Apktool - A tool for reverse engineering Android apk files
padding-oracle-attacker - 🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
gophish - Open-Source Phishing Toolkit