An automated exploit generation tool based on arbiters source and sink model.
Block DIagram of the Tool:
git clone https://github.com/maheshgm/arbiterX
cd arbiterX/
python main.py -f vuln.elf -t template.json
{
run_format : ["binary_name", <stdin or @ for command line arguments>],
sources: [<list of sources functions use main as default>],
sinks : [<list of target functions to check reachability>],
exec : "function to call using the vulnerability",
}
Look at the example template for better understanding.
ArbiterX can find and generate an exploit for buffer overflows. The exploit generated will execute the target function present in the binary. With minor modification to the code can get a shell also (return to libc).