简单的 onegadget 小工具,建议配合 libcdb 食用
pip install onegadget-selector
from pwn import *
from onegadget_selector import *
'''
省略...
'''
libc = ELF(libcdb.search_by_symbol_offsets({'__libc_start_main': __libc_start_main_addr % 0x1000}))
show_onegadgets(libc.path)
'''
省略...
'''from pwn import *
from onegadget_selector import *
'''
省略...
'''
libc = ELF(libcdb.search_by_symbol_offsets({'__libc_start_main': __libc_start_main_addr % 0x1000}))
base_addr = __libc_start_main_addr - libc.symbols['__libc_start_main']
one_gadget_offset = select_onegadgets(libc.path)
one_gadget_addr = base_addr + one_gadget_offset
'''
省略...
'''