one_gadget
A command-line tool that finds one-gadget RCE (execve('/bin/sh')) offsets in libc binaries for CTF pwn challenges.
What is one_gadget?
OneGadget is a Ruby gem and command-line tool that automatically finds 'one-gadget' remote code execution sequences in libc libraries. It identifies offsets that, when jumped to, execute `execve('/bin/sh', NULL, NULL)` to spawn a shell. This solves the problem of manually searching through disassembled libc binaries for usable RCE gadgets during CTF pwn challenges.
CTF players, binary exploitation enthusiasts, and security researchers who participate in or study pwn (binary exploitation) challenges, particularly those involving libc and RCE.
Developers choose OneGadget because it dramatically speeds up the gadget-finding process compared to manual disassembly, supports multiple architectures, intelligently filters gadgets by exploitability, and offers features like BuildID lookup and script integration for automated testing.
Overview
The best tool for finding one gadget RCE in libc.so.6
Use Cases
Best For
- Finding execve('/bin/sh') gadgets in libc for CTF pwn challenges
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
