[BlackHat tool] Router Exploit Shovel: Automated Application Generation for Stack Overflow Types on Wireless Routers

by do son ·

Router Exploit Shovel

Router Exploit Shovel

Automated Application Generation for Stack Overflow Types on Wireless Routers

Router exploits shovel is an automated application generation tool for stack overflow types on wireless routers. The tool implements the key functions of exploits, it can adapt to the length of the data padding on the stack, generate the ROP chain, generate the encoded shellcode, and finally assemble them into a complete attack code. The user only needs to attach the attack code to the overflow location of the POC to complete the Exploit of the remote code execution.

Code structure

--Router_Exploit_Shovel.py       #Startup script
--databases/                     
  |---ROP_patterns/              #YAML file of ROP patterns        
  |---shellcodes/                #YAML file of shellcodes
--example/                       #Nday vulnerabilities, full report and exploit code
--results/                       
  |---ROP_gadgets/               #ROP gadgets generating results       
  |---attackBlock.txt            #Attack block generating results
--ropper/                        #Modified ropper module to get all gadgets
--filebytes/                     #Filebytes module to load ELFs
--router_exp_shovel/             #Main module         
  |---offset_calculator/         #Calculate padding size 
  |---ROP_maker/                 #Make ROP chains
  |---shellcode_maker/           #Make shellcodes
--qemuTestEnvironment/           #MIPS run-environment for router exploitation

ROP chain generation

This tool uses a pattern to generate ROP chains. Extract patterns from common ROP exploitation procedure. Use regex matching to find available gadgets to fill up chain strings. Base64 encoding is to avoid duplicate character escapes. For example:

Attackblocks

You can get attackblocks generated in results/attackBlocks.txt. Such as:

Install

$ git clone https://github.com/arthastang/Router-Exploit-Shovel.git
$ cd Router-Exploit-Shovel/
$ python3 setup.py install

Use

Source: https://github.com/arthastang/

Tags: Router-Exploit-Shovel