用于查询libc版本函数偏移的工具

以你之姓@ 2023-02-16 12:00 54阅读 0赞

在线查询libc版本的网站：  
[https://libc.blukat.me/][https_libc.blukat.me]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70]

一个python项目`LibcSearcher`  
项目地址：[https://github.com/lieanu/LibcSearcher][https_github.com_lieanu_LibcSearcher]  
安装  
（下载比较慢，该项目依赖另外一个项目[https://github.com/lieanu/libc-database][https_github.com_lieanu_libc-database]）

git clone https://github.com/lieanu/LibcSearcher.git
    cd LibcSearcher
    python setup.py develop

这个项目我已经打包在下面地址了[https://download.csdn.net/download/weixin\_43833642/12507253][https_download.csdn.net_download_weixin_43833642_12507253]（大概有500MB左右，从github上下要下到猴年马月…）

from LibcSearcher import *
    
    #第二个参数，为已泄露的实际地址,或最后12位(比如：d90)，int类型
    obj = LibcSearcher("fgets", 0X7ff39014bd90)
    
    obj.dump("system")        #system 偏移
    obj.dump("str_bin_sh")    #/bin/sh 偏移
    obj.dump("__libc_start_main_ret")

另一个用ruby开发的项目`one_gadget`  
项目地址：[https://github.com/david942j/one\_gadget][https_github.com_david942j_one_gadget]  
安装  
需要ruby环境

sudo apt install ruby

gem install one_gadget

python中调用

import subprocess
    def one_gadget(filename):
      return map(int, subprocess.check_output(['one_gadget', '--raw', filename]).split(' '))
    
    one_gadget('/lib/x86_64-linux-gnu/libc.so.6')

参考：[https://www.jianshu.com/p/8d2552b8e1a2][https_www.jianshu.com_p_8d2552b8e1a2]

[https_libc.blukat.me]: https://libc.blukat.me/
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20200607154455802.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg==,size_16,color_FFFFFF,t_70
[https_github.com_lieanu_LibcSearcher]: https://github.com/lieanu/LibcSearcher
[https_github.com_lieanu_libc-database]: https://github.com/lieanu/libc-database
[https_download.csdn.net_download_weixin_43833642_12507253]: https://download.csdn.net/download/weixin_43833642/12507253
[https_github.com_david942j_one_gadget]: https://github.com/david942j/one_gadget
[https_www.jianshu.com_p_8d2552b8e1a2]: https://www.jianshu.com/p/8d2552b8e1a2