pwntools-r2 1.3.3.8

Debug exploits like a boss with Radare2 in pwntools

pwntools-r2

Launch radare2 from pwntools. This has been tested to work in combination with tmux - other combinations may or may not work. This might also work with other setups without tmux but that's not supported currently.

Ok How To Use This?

• Create a new pipenv: pipenv --python 2.7
• Install this: pipenv install pwntools-r2
• Enter the virtual environment: pipenv shell
• Code your 1337 exploit:

#!/usr/bin/env python2

from pwntools_r2 import *

r2script = """
#r2.cmd('db sym.main')
#r2.cmd('aaa')
#r2.cmd('V!')
"""

p = r2dbg('./a', r2script=r2script)
p.interactive()

Be sure to not forget interactive() at the end :)

Please note that the commands for r2 have to be prefixed with a #. If you want to pass additional parameters, you can use the same in the function prototype of gdb.debug from pwntools.

• Do stuff: python2.7 ./exploit.py

Troubleshooting

• You can debug any errors with context.log_level = 'DEBUG' via your pwntools python script.
• If no terminal can be found, try setting context.terminal accordingly - e.g. to urxvtc

Credits

This is based on this and this.