Product Hunt Launch!CybersecTools - Find and share cybersecurity tools across 944 use cases | Product Hunt
OneGadget Logo

OneGadget

OneGadget is a CTF-focused tool that uses symbolic execution to find RCE gadgets in binaries that can execute shell commands through execve('/bin/sh', NULL, NULL).

2,220
Security Operations
Free
Visit website
0

OneGadget Description

OneGadget is a specialized tool designed for CTF pwn challenges that identifies RCE (remote code execution) gadgets capable of executing execve('/bin/sh', NULL, NULL). The tool employs symbolic execution techniques to analyze binary files and determine the constraints required for gadgets to function successfully. It supports multiple architectures including i386, amd64, and aarch64. OneGadget provides a command-line interface with various options for customization. Users can specify build IDs, force file searches, control output verbosity levels, and order gadgets based on their proximity to specific functions or files. The tool is distributed through RubyGems.org for easy installation and integration into security testing workflows. It focuses specifically on finding gadgets that can spawn shell access, making it particularly useful for exploit development and binary exploitation scenarios.

OneGadget FAQ

Common questions about OneGadget including features, pricing, alternatives, and user reviews.

OneGadget is OneGadget is a CTF-focused tool that uses symbolic execution to find RCE gadgets in binaries that can execute shell commands through execve('/bin/sh', NULL, NULL).. It is a Security Operations solution designed to help security teams with Exploit, Reverse Engineering, Ruby.

Have more questions? Browse our categories or search for specific tools.

FEATURED

Proton Pass Logo

Password manager with end-to-end encryption and identity protection features

NordVPN Logo

VPN service providing encrypted internet connections and privacy protection

Mandos Fractional CISO Services Logo

Fractional CISO services for B2B companies to accelerate sales and compliance

Stay Updated with Mandos Brief

Get the latest cybersecurity updates in your inbox

POPULAR

RoboShadow Logo

Automated vulnerability assessment and remediation platform

12
TestSavantAI Logo

Security platform that provides protection, monitoring and governance for enterprise generative AI applications and LLMs against various threats including prompt injection and data poisoning.

6
Cybersec Feeds Logo

A threat intelligence aggregation service that consolidates and summarizes security updates from multiple sources to provide comprehensive cybersecurity situational awareness.

6
OSINTLeak Logo

OSINTLeak is a tool for discovering and analyzing leaked sensitive information across various online sources to identify potential security risks.

5
Mandos Brief Cybersecurity Newsletter Logo

Weekly cybersecurity newsletter for security leaders and professionals

5
View Popular Tools →