phx / binex

Docker image for binary exploitation

binex

binex is an Ubuntu-based Docker image built for binary inspection and exploitation, such as would be used for creating/exploiting buffer overflows and working on CTFs.

It comes in most handy when using a computer without all of the necessary tools installed, or especially on MacOS where getting gdb to work properly can be a pain.

It's also very handy on Windows, for obvious reasons.

More than likely, you are going to want to run everything as root, so simply sudo -s after launching the container. I have added the ubuntu user mainly for testing privilege escalation.

Scroll down to the bottom for a [probably non-exhaustive] list of all installed scripts, tools, and utilities. More will be added in time.

There are a few different ways to run binex:

Pull latest image from DockerHub

docker run --name binex --rm -itv /path/to/host_folder_to_share:/share lphxl/binex /bin/bash

You will need to specify the path to the directory on the host that you wish to mount to the /share directory in the container.

Updating the image:

docker pull lphxl/binex:latest

Running via DockerHub is the most straightforward way to run binex. The image is always kept up-to-date via GitHub actions linked directly to the Dockerfile in this repo.

If you wish to use the GitHub Docker container registry ghcr.io/phx/binex, you can also pull and run from there:

docker run --name binex --rm -itv /path/to/host_folder_to_share:/share ghcr.io/phx/binex /bin/bash

If you don't trust pre-built container images, feel free to build directly from the Dockerfile itself using the instructions below.

Build from Dockerfile

git clone https://github.com/phx/binex
cd binex
docker build -t binex .
docker run --name binex --rm -itv /path/to/host_folder_to_share:/share binex /bin/bash

I have the following personal alias sourced from my ~/.bash_profile for that last command:

alias binex='docker run --name binex --rm -itv /Users/phx:/share binex /bin/bash'

Updating the image:

Just cd back to the binex git repo directory, pull any updates, and rebuild the image:

cd binex
git pull
docker build -t binex .

Probably incomplete list of scripts, and tools installed:

build-essential
gdb
- peda (https://github.com/longld/peda)
python2.7:
- pip
  - pwntools
  - ropper
  - lilendian (https://github.com/phx/lilendian)
python3:
- pip
  - pwntools
  - ropper
  - lilendian (https://github.com/phx/lilendian)
libc-database (https://github.com/niklasb/libc-database)
checksec (standalone)
pattern_create.rb (https://raw.githubusercontent.com/rapid7/metasploit-framework/master/tools/exploit/pattern_create.rb)
pattern_offset.rb (https://raw.githubusercontent.com/rapid7/metasploit-framework/master/tools/exploit/pattern_offset.rb)
personal scripts:
- hex2ascii
- hexorganize
- hex2ascii_organize
- pietest
- vc
others tools:
- curl
- dnsutils
- less
- lsof
- nano
- nc
- ncat
- perl
- ruby
- socat
- telnet
- vim
- wget