OneGadget
OneGadget is a CTF-focused tool that uses symbolic execution to find RCE gadgets in binaries that can execute shell commands through execve('/bin/sh', NULL, NULL).
OneGadget is a CTF-focused tool that uses symbolic execution to find RCE gadgets in binaries that can execute shell commands through execve('/bin/sh', NULL, NULL).
Checked October 2026.
OneGadget is a specialized tool designed for CTF pwn challenges that identifies RCE (remote code execution) gadgets capable of executing execve('/bin/sh', NULL, NULL).
The tool employs symbolic execution techniques to analyze binary files and determine the constraints required for gadgets to function successfully. It supports multiple architectures including i386, amd64, and aarch64.
OneGadget provides a command-line interface with various options for customization. Users can specify build IDs, force file searches, control output verbosity levels, and order gadgets based on their proximity to specific functions or files.
The tool is distributed through RubyGems.org for easy installation and integration into security testing workflows. It focuses specifically on finding gadgets that can spawn shell access, making it particularly useful for exploit development and binary exploitation scenarios.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about OneGadget: features, pricing and alternatives.
OneGadget is a product in the Penetration Testing category. It covers Reverse Engineering, CTF and Symbolic Execution.
OneGadget is free. Download and setup instructions are at https://github.com/david942j/one_gadget/.
Alternatives to OneGadget listed on CybersecTools:
Compare all OneGadget alternatives at https://cybersectools.com/alternatives/onegadget
OneGadget is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
A Burp Suite extension that detects NGINX alias traversal vulnerabilities by analyzing HTTP traffic patterns to identify path traversal misconfigurations.
An image with commonly used tools for creating a pentest environment easily and quickly, with detailed instructions for launching in a VPS.
Ophcrack is a free Windows password cracker based on rainbow tables with various features for password recovery.
Automated continuous pentesting engine that discovers assets and validates exploitability.
Open source security auditing tool to search and dump system configuration.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
