badbyte 0.1.2

Deal with bad characters easily during exploit writing with badchars.

badbyte

Deal with bad characters easily during exploit writing with badchars.

Table of Contents

1. Installation
2. Usage
   • Generate payload to check all characters
   • Analyze memory dumped after trigger
3. Programatically use

↑Instalation

using pip:

pip3 install badbyte 

or from repo:

git clone [e-mail]:C3l1n/badbyte.git
cd badbyte
pip3 install .

↑Usage

You can always use:

badbyte --help

↑Generate payload to check all characters

badbyte g --bad "3d 26 25 0d" --pre START --post STOP

use:

• --bad to supply hexascii values of bad characters
• --pre to set string for marking start point (or leave default)
• --post to set string for marking stop point (or leave default)

Then use payload in your exploit and fire it.

↑Analyze memory dumped after trigger

Copy hexascii from memory dump of your favourite debugger i.e. windbg:

remember to skip addresses and ascii representation. I use vim and column select or visual studio code and alt+shift select.

Fire badbyte to analyze output:

badbyte p -c --pre START --post STOP

↑Programatically use

Documentation not made (feel free to read code) but you can find in example/programatically_generate_payload.py example of payload generation in exploit.