radare2/binr/rasc2/rasc2.1
pancake 94f905cfe0 * Do not build rasc2 anymore
* ragg2 now works better
  - Show bitsize in ragg2 -L
  - Added a sample plugin for x86-64 osx shellcode
    - command can be configured, suid can be enabled
* Minor fix in r_buf api

--HG--
rename : man/rasc2.1 => binr/rasc2/rasc2.1
2011-11-13 04:47:56 +01:00

71 lines
1.7 KiB
Groff

.Dd October 27, 2010
.Dt RASC2 1
.Os
.Sh NAME
.Nm rasc2
.Nd Radare Shellcode helper utility
.Sh SYNOPSIS
.Nm rasc2
.Op -cCxXtLV
.Op -A N
.Op -C N
.Op -E N
.Op -N N
.Op -a addr@off
.Op -s hexpair
.Op -i name
.Op -S file
.Op -l port
.Sh DESCRIPTION
rasc2 implements the most common practices to generate shellcodes with paddings with 0x41's ('A'), nops, breakpoints or enumerations (00 01 02 03 ..).
.Pp
rasc2 can serve a syscall proxy at a specified port with \-l [port]
.Pp
There's an hardcoded database of common used shellcodes that can be listed with \-L. Use \-i to specify which want you want to use.
.Pp
The output can be raw or in hexpairs (\-x) or C array (\-c).
.Pp
Use \-X to inline execute the specified. (useful for testing)
.Pp
To specify the
.Bl -tag -width Fl
.It Fl A|-C|-E|-N Ar count
Specify the number of 'A's, breakpoints, enumerations and nops to be prefixed to the shellcode.
.It Fl a Ar addr@off
Set the return address at a specified offset inside the resulting shellcode
.It Fl s Ar 'hexpair'
Set the shellcode in hexpair format. For example (\-s '01 02 03')
.It Fl l Ar port
Listen a syscall proxy server at a specified port.
.It Fl L
List all hardcoded shellcodes
.It Fl c
Show output in C array format
.It Fl x
Show output in hexpairs format
.It Fl X
Execute resulting shellcode
.It Fl t
Performs some tests on the current platform
.It Fl h
Show usage help message.
.El
.Sh ENVIRONMENT
Some shellcodes can be modified using the environment variables CMD, HOST and PORT. See \-L for more information.
.Sh SEE ALSO
.Pp
.Xr rahash2(1) ,
.Xr rafind(1) ,
.Xr radare2(1) ,
.Xr radiff2(1) ,
.Xr ranal2(1) ,
.Xr rabin2(1) ,
.Xr rasm2(1) ,
.Xr rax2(1) ,
.Xr ragg2(1) ,
.Xr rarun2(1) ,
.Sh AUTHORS
.Pp
pancake <pancake@nopcode.org>,
nibble <nibble@develsec.org>