grayhatacademy / mow Goto Github PK

Make some way to disable stdout. Maybe use logging?

Add an option to add_to_stack that allows for not adding the base address. Default to False because most of the time the base address should be added.

When crafting the overflow sometimes $fp is not part of the overflow. Add an option to specify it is not used.

Remove the accounting for bit if there is not string.

Put quotes around actual string so spaces are visible if present.

The padding after $ra is not taken into account when determining the distance to the first register in an overflow. This results in being off by the lenght of padding after ra, typically 4.

It's more obvious to name it fp instead of s8.

Add option for 'fire_and_forget' but default option should be to listen for a response and print it.

Would be nice to have the ability to force an overwrite on the add_to_stack function in case you're working on the command line.

The last register is not getting labeled as $fp.

Add a bad bytes check when generating the overflow. Should throw an exception if a bad byte is encountered.

Currently returning to .text doesn't work because it adds the NULL to the packet when it should not be doing that. Add support that checks if the stack is empty and the last byte is NULL. If this is true drop the byte. This is only valid in little endian overflows, ignore if big endian.