search

Gallopsled / pwntools

CTF framework and exploit development library
http://pwntools.com
Other
12.05k stars 1.71k forks source link

Regression testing framework for shellcode #104

Closed TethysSvensson closed 8 years ago

TethysSvensson commented 10 years ago

We already have doctests for testing most stand alone features and the repo Gallopsled/pwntools-write-ups tests most larger features (or will eventually). However none of these would every hit every shellcode or every way a shellcode can be used.

It would be awesome to be able to test the shellcodes in a systematic way.

Ideally we would want both functionality testing (e.g. test that findpeersh actually finds the right socket) and strace/similar based testing.

zachriggle commented 10 years ago

Working on this at the moment. The idea is that there'll be a group of binaries hosted on a DigitalOcean droplet, which is running a custom service to allow various peeks/pokes/writes/overflows. We should be able to test everything that qemu-user can run.

zachriggle commented 9 years ago

This is in progress here: https://github.com/zachriggle/pwntools-regression/

TethysSvensson commented 9 years ago

Should we close this, or keep it open until we have merged the regression testing into the main repo?

zachriggle commented 9 years ago

I'd leave it open until Travis is actually running those tests

zachriggle commented 8 years ago

This is complete and actually used via shellcraft via run_assembly() and similar.