ChrisTheCoolHut/Zeratool

Health v2 · maintenance only

Adoption not part of the score

1144 stars · 145 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Zeratool is an Automatic Exploit Generation (AEG) tool that uses angr to concolically analyze binaries for buffer overflow and format string vulnerabilities, then weaponizes them with pwntools for remote code execution. It can automatically submit generated payloads to remote CTF servers to capture flags, including libc leaking and ROP chain generation.

Use cases

• automatically exploit buffer overflow CTF challenges
• generate format string exploits for binaries
• capture flags from remote CTF servers automatically
• leak remote libc addresses via puts/printf GOT entries
• generate ROP chains that execve /bin/sh
• find unconstrained paths in binaries with symbolic execution
• run ret2dlresolve attacks on 64-bit binaries

When to choose

• solving CTF pwn challenges with buffer overflows or format string bugs
• automating exploit generation for simple exploitable binaries
• capturing flags from remote CTF servers without manual exploit writing
• learning how AEG and binary exploitation techniques work

When to avoid

• exploiting modern hardened binaries with full mitigations
• production security testing requiring reliable, maintained tooling
• complex exploitation scenarios beyond buffer overflows and format strings
• Windows or macOS targets (tested on Ubuntu only)

Facets

cli-tool · maturity maintenance

penetration-testing security cli security penetration-testing developer-tools python cli aeg ctf exploitation binary-exploitation angr pwntools buffer-overflow format-string shellcode rop linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ChrisTheCoolHut/Zeratool")