pwntools_demo.py

#https://docs.pwntools.com/en/stable/

from pwn import *

# print(cyclic(50))
# print(cyclic_find("laaa"))
# print(shellcraft.sh())

# print(hexdump(asm(shellcraft.sh())))

# p = process("/bin/sh")
# p.sendline("echo hello;")
# p.interactive()

# r = remote("127.0.0.1", 1234)
# r.sendline("hello!")
# r.interactive()
# r.close()

# print(p32(0x13371337))
# print(hex(u32(p32(0x13371337))))

l = ELF('/bin/bash')
print(hex(l.address))
print(hex(l.entry))

print(hex(l.got['write']))
print(hex(l.plt['write']))

for address in l.search(b'/bin/sh\x00'):
    print(hex(address))

print(hex(next(l.search(asm('jmp esp')))))

r = ROP(l)
print(r.rbx)

print(xor(xor(b"A", b"B"), b"A"))
print(b64e(b"test"))
print(b64d(b"dGVzdA=="))
print(md5sumhex(b"hello"))
print(sha1sumhex(b"hello"))

print(bits(b'a'))
print(unbits([0, 1, 1, 0, 0, 0, 0, 1]))