- Joined
- May 15, 2017
- Messages
- 982
- Likes
- 760
- Points
- 1,045
![seccomp-tools_10_emu-amigo.png](https://1.bp.blogspot.com/-Estlvuxg824/XTUEDbs99wI/AAAAAAAAPro/mLd1ISTw4Q4NROg2QErFy-sELj-yc39cQCLcBGAs/s640/seccomp-tools_10_emu-amigo.png)
Provide powerful tools for seccomp analysis.
This project is targeted to (but not limited to) analyze seccomp sandbox in CTF pwn challenges. Some features might be CTF-specific, but still useful for analyzing seccomp in real-case.
Features
- Dump - Automatically dumps seccomp-bpf from execution file(s).
- Disasm - Converts bpf to human readable format.Simple decompile.
- Display syscall names and arguments when possible.
- Colorful!
- Asm - Write seccomp rules is so easy!
- Emu - Emulates seccomp rules.
- Supports multi-architectures.
Available on RubyGems.org!
If you failed when compiling, try:Code:
gem install seccomp-tools
Download Seccomp-ToolsCode:
sudo apt install gcc ruby-dev