pwnlib.shellcraft — Shellcode generation

The shellcode module.

This module contains functions for generating shellcode.

It is organized first by architecture and then by operating system.

Submodules

• pwnlib.shellcraft.aarch64 — Shellcode for AArch64
  • pwnlib.shellcraft.aarch64
    • breakpoint()
    • crash()
    • infloop()
    • memcpy()
    • mov()
    • push()
    • pushstr()
    • pushstr_array()
    • setregs()
    • trap()
    • xor()
  • pwnlib.shellcraft.aarch64.linux
    • cat()
    • cat2()
    • connect()
    • dupio()
    • dupsh()
    • echo()
    • forkexit()
    • kill()
    • killparent()
    • loader()
    • loader_append()
    • open()
    • readn()
    • setresuid()
    • sh()
    • sleep()
    • socket()
    • stage()
    • syscall()
• pwnlib.shellcraft.amd64 — Shellcode for AMD64
  • pwnlib.shellcraft.amd64
    • crash()
    • infloop()
    • itoa()
    • memcpy()
    • mov()
    • nop()
    • popad()
    • push()
    • pushad()
    • pushstr()
    • pushstr_array()
    • ret()
    • setregs()
    • strcpy()
    • strlen()
    • trap()
    • xor()
  • pwnlib.shellcraft.amd64.linux
    • amd64_to_i386()
    • bindsh()
    • cat()
    • cat2()
    • connect()
    • connectstager()
    • dupio()
    • dupsh()
    • echo()
    • egghunter()
    • findpeer()
    • findpeersh()
    • findpeerstager()
    • forkbomb()
    • forkexit()
    • getpid()
    • kill()
    • killparent()
    • listen()
    • loader()
    • loader_append()
    • membot()
    • migrate_stack()
    • mmap_rwx()
    • read()
    • read_upto()
    • readfile()
    • readinto()
    • readloop()
    • readn()
    • readptr()
    • recvsize()
    • setregid()
    • setresuid()
    • setreuid()
    • sh()
    • sleep()
    • socket()
    • stage()
    • stager()
    • strace_dos()
    • syscall()
    • writeloop()
  • pwnlib.shellcraft.amd64.windows
    • cmd()
    • getexport()
    • getprocaddress()
    • kernel32base()
    • ntdllbase()
    • peb()
    • teb()
    • winexec()
• pwnlib.shellcraft.arm — Shellcode for ARM
  • pwnlib.shellcraft.arm
    • crash()
    • infloop()
    • itoa()
    • memcpy()
    • mov()
    • nop()
    • push()
    • pushstr()
    • pushstr_array()
    • ret()
    • setregs()
    • to_thumb()
    • trap()
    • udiv_10()
    • xor()
  • pwnlib.shellcraft.arm.linux
    • cacheflush()
    • cat()
    • cat2()
    • connect()
    • dir()
    • dupio()
    • dupsh()
    • echo()
    • egghunter()
    • forkbomb()
    • forkexit()
    • kill()
    • killparent()
    • setresuid()
    • sh()
    • sleep()
    • syscall()
• pwnlib.shellcraft.common — Shellcode common to all architecture
  • label()
• pwnlib.shellcraft.i386 — Shellcode for Intel 80386
  • pwnlib.shellcraft.i386
    • breakpoint()
    • crash()
    • epilog()
    • function()
    • getpc()
    • infloop()
    • itoa()
    • memcpy()
    • mov()
    • nop()
    • prolog()
    • push()
    • pushstr()
    • pushstr_array()
    • ret()
    • setregs()
    • stackarg()
    • stackhunter()
    • stackhunter_helper()
    • strcpy()
    • strlen()
    • trap()
    • xor()
  • pwnlib.shellcraft.i386.linux
    • acceptloop_ipv4()
    • cat()
    • cat2()
    • connect()
    • connectstager()
    • dir()
    • dupio()
    • dupsh()
    • echo()
    • egghunter()
    • findpeer()
    • findpeersh()
    • findpeerstager()
    • forkbomb()
    • forkexit()
    • i386_to_amd64()
    • kill()
    • killparent()
    • loader()
    • loader_append()
    • mprotect_all()
    • pidmax()
    • readfile()
    • readn()
    • recvsize()
    • setregid()
    • setresuid()
    • setreuid()
    • sh()
    • sleep()
    • socket()
    • socketcall()
    • stage()
    • stager()
    • syscall()
  • pwnlib.shellcraft.i386.freebsd
    • acceptloop_ipv4()
    • i386_to_amd64()
    • sh()
    • syscall()
• pwnlib.shellcraft.mips — Shellcode for MIPS
  • pwnlib.shellcraft.mips
    • mov()
    • nop()
    • push()
    • pushstr()
    • pushstr_array()
    • setregs()
    • trap()
  • pwnlib.shellcraft.mips.linux
    • bindsh()
    • cat()
    • cat2()
    • connect()
    • dupio()
    • dupsh()
    • echo()
    • findpeer()
    • findpeersh()
    • forkbomb()
    • forkexit()
    • kill()
    • killparent()
    • listen()
    • readfile()
    • setresuid()
    • sh()
    • sleep()
    • stager()
    • syscall()
• pwnlib.shellcraft.riscv64 — Shellcode for RISCV64
  • pwnlib.shellcraft.riscv64
    • mov()
    • nop()
    • push()
    • pushstr()
    • pushstr_array()
    • setregs()
    • trap()
    • xor()
  • pwnlib.shellcraft.riscv64.linux
    • syscall()
• pwnlib.shellcraft.thumb — Shellcode for Thumb Mode
  • pwnlib.shellcraft.thumb
    • crash()
    • infloop()
    • itoa()
    • memcpy()
    • mov()
    • nop()
    • popad()
    • push()
    • pushad()
    • pushstr()
    • pushstr_array()
    • ret()
    • setregs()
    • to_arm()
    • trap()
    • udiv_10()
  • pwnlib.shellcraft.thumb.linux
    • bindsh()
    • cat()
    • cat2()
    • connect()
    • connectstager()
    • dupio()
    • dupsh()
    • echo()
    • findpeer()
    • findpeersh()
    • findpeerstager()
    • forkbomb()
    • forkexit()
    • kill()
    • killparent()
    • listen()
    • loader()
    • loader_append()
    • readfile()
    • readn()
    • recvsize()
    • setresuid()
    • sh()
    • sleep()
    • stage()
    • stager()
    • syscall()