pwnkit

This is a collection of tools from Kali to run on any machine with a docker image. This tool is aimed to help during CTFs.

This tool is only tested for Linux and Mac, it might or might not work on Windows.

Please use at your own risk. Always check what you are running!

Features

Shares the folder /share/ from the host to the container.
Changes directory to same working directory as on host if exists.
Appends hosts /etc/hosts to container /etc/hosts.
Easy project selection.

Installation

Make sure Docker is installed.
Clone this repository.
Optional: Add extracted location to path for easy execution.
Run ./pwnkit or pwnkit.

Project selection

Using the command setp the current working directory will be stored as the current project in /share/.curproj. The command cdp can then go tho the current project using the /share/.curproj file. This works within pwnkit but can also work outside pwnkit by adding the following to your .zshrc or equivalent:

alias cdp="cd \`cat /share/.curproj\`"
alias setp="echo \`pwd\` > /share/.curproj"

This only works well if you use the /share folder to share files between pwnkit and its host.

Mounting a volume into pwnkit

Change the file ./pwnkit-start from
docker run -i -t --rm -v /challenges/:/challenges/ jasperboot/pwnkit:latest
to
docker run -i -t --rm -v [LOCAL FOLDER]:/challenges/ jasperboot/pwnkit:latest

pwnkit is used to update and start the toolkit.
pwnkit-update is used to update the image and git repo.
pwnkit-start is used to start the toolkit. To update as well, use pwnkit.
pwnkit-build is used to build the image from scratch and update it on the docker registry. pwnkit-gdb is used to attach to a gdb session setup in pwntools.

Using pwntools and gdb

Add the following to your pwntools script: context.terminal = ['/root/tools/launch-in-session.sh', 'gdb-session'].
When pwntools opens a gdb session, execute pwnkit-gdb on your local machine to attach.

hoenchioma / pwnkit