- Joined
- May 15, 2017
- Messages
- 983
- Likes
- 759
- Points
- 1,045
Provide powerful tools for seccomp analysis.
This project is targeted to (but not limited to) analyze seccomp sandbox in CTF pwn challenges. Some features might be CTF-specific, but still useful for analyzing seccomp in real-case.
Features
- Dump - Automatically dumps seccomp-bpf from execution file(s).
- Disasm - Converts bpf to human readable format.Simple decompile.
- Display syscall names and arguments when possible.
- Colorful!
- Asm - Write seccomp rules is so easy!
- Emu - Emulates seccomp rules.
- Supports multi-architectures.
Available on RubyGems.org!
If you failed when compiling, try:Code:
gem install seccomp-tools
Download Seccomp-ToolsCode:
sudo apt install gcc ruby-dev