ELFGuard is a simple tool which helps you to guard your ELF binary.
You could insert the shellcode into the ELF binary to do anything you want, such as
- use a SECCOMP shellcode to restrict syscalls
- use a reverse shell shellcode to leave a backdoor
- more in future...
Only support amd64 arch now. Wish you enjoy it and don't be evil ;)
- python2
- pwntools & binutils
Find proper space to store the shellcode and return the file's offset to write shellcode.
- expand a segment
- add a segment
- .eh_frame
Generate specified shellcode to use:
- SECCOMP
- reverse shell
control the flow control:
- entry point hjack
- PLT HOOK
- OOP
- i386 arch supported
- more shellcode