1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
|
from __future__ import absolute_import
from __future__ import division
import os
import tempfile
from pwnlib.context import LocalContext
from pwnlib.elf import ELF
from pwnlib.tubes.process import process
__all__ = ['run_assembly', 'run_shellcode', 'run_assembly_exitcode', 'run_shellcode_exitcode']
@LocalContext
def run_assembly(assembly):
"""
Given an assembly listing, assemble and execute it.
Returns:
A :class:`pwnlib.tubes.process.process` tube to interact with the process.
Example:
>>> p = run_assembly('mov ebx, 3; mov eax, SYS_exit; int 0x80;')
>>> p.wait_for_close()
>>> p.poll()
3
>>> p = run_assembly('mov r0, #12; mov r7, #1; svc #0', arch='arm')
>>> p.wait_for_close()
>>> p.poll()
12
"""
return ELF.from_assembly(assembly).process()
@LocalContext
def run_shellcode(bytes, **kw):
"""Given assembled machine code bytes, execute them.
Example:
>>> insn_bytes = asm('mov ebx, 3; mov eax, SYS_exit; int 0x80;')
>>> p = run_shellcode(insn_bytes)
>>> p.wait_for_close()
>>> p.poll()
3
>>> insn_bytes = asm('mov r0, #12; mov r7, #1; svc #0', arch='arm')
>>> p = run_shellcode(insn_bytes, arch='arm')
>>> p.wait_for_close()
>>> p.poll()
12
"""
return ELF.from_bytes(bytes, **kw).process()
@LocalContext
def run_assembly_exitcode(assembly):
"""
Given an assembly listing, assemble and execute it, and wait for
the process to die.
Returns:
The exit code of the process.
Example:
>>> run_assembly_exitcode('mov ebx, 3; mov eax, SYS_exit; int 0x80;')
3
"""
p = run_assembly(assembly)
p.wait_for_close()
return p.poll()
@LocalContext
def run_shellcode_exitcode(bytes):
"""
Given assembled machine code bytes, execute them, and wait for
the process to die.
Returns:
The exit code of the process.
Example:
>>> insn_bytes = asm('mov ebx, 3; mov eax, SYS_exit; int 0x80;')
>>> run_shellcode_exitcode(insn_bytes)
3
"""
p = run_shellcode(bytes)
p.wait_for_close()
return p.poll()
|
