SXDK

Inspiration

Necessity to be able to generate overflows on the fly for CTFs in a quick fashion. Currently there isn't any application that has a GUI to allow for creation of eggs and most of the programs that offer a script provide a horrible interface without support for multiple oses / instruction sets / architectures.

What it does

Generates an egg for exploitation of stack or heap overflows.

How we built it

Python, Pyqt4, pwn, pwntools, binutils.

Challenges we ran into

Documentation of pwn isn't the greatest and a lot of links point to 404ed addresses.

Accomplishments that we're proud of

First time utilizing PyQT and pwntools for a development project.

What we learned

What's next for SXDK

Future implementations will add automated jiggling of the stack location to allow users to exploit directly rather than having to generate a new egg for each iteration.

We would also like to add support for custom shellcode.

Built With

• binutils
• pwn
• pyqt4
• python