Breaking Code

March 18, 2012

Heappie! + WinAppDbg

Filed under: Tools — Tags: , , , , , , — Mario Vilas @ 7:35 pm

In case you missed it, AnĂ­bal Sacco released a new tool called Heappie! to analyze heap sprays in multiple platforms. It uses PyGame and PythonCard for the GUI and Kenshoto’s VTrace as the backend. It’s really cool, check it out đŸ™‚

Trippy screenshot, dude!

Now, I never get tired of saying how great VTrace is. It’s written in Python, supports multiple platforms and quite comfortable to develop with. But alas, I tend to prefer my own debugger (call me biased if you wish!). So today I went ahead and added WinAppDbg support to Heappie!. When WinAppDbg is installed, it’s chosen automatically as the backend. If not found, it falls back to VTrace. That way we don’t lose support for other platforms, since WinAppDbg naturally only works on Windows.

This patch also adds support for 64 bit versions of Windows, in case you were thinking this was just an exercise in self indulgence. Well, it is that, but not just that. Ahem.

TL;DR

Just download the file above, go to AnĂ­bal’s blog to learn how to use it, and exploit all the bugs! đŸ˜€

So many vulns, so little time.

Download

Heappie-WinAppDbg.zip

2 Comments »

  1. […] If you’re using Heappie! in windows I invite you to try the version modified by Mario Vilas here. Instead of vtrace, he is using his own library (The awesome WinAppDbg) so in this way, Heappie […]

    Pingback by Heappie! – Heap spray analysis tool. « Exploiting Stuff. — March 19, 2012 @ 1:22 am

  2. […] WinAppDbg + Heappie-WinAppDbg […]

    Pingback by Good tutorial for WinDbg? – w3toppers.com — May 15, 2023 @ 2:40 pm


RSS feed for comments on this post. TrackBack URI

Leave a comment

Blog at WordPress.com.