Getting started

Install and run your first replay

A portable binary, no installer and no toolchain. Download it, point it at a target you own, and replay a documented attack.

Step 1

Get the program

Download the latest binary for your platform from the releases page. Rename it to exploitmatic (keep .exe on Windows) and, on Linux and macOS, make it executable with chmod +x.

The binaries are unsigned. Verify the checksum against the release notes before you run one.

install bash

# download the latest release from the releases page
# https://github.com/exploitmatic/exploitmatic/releases
mv exploitmatic-linux exploitmatic
chmod +x exploitmatic
./exploitmatic

first run bash

$ ./exploitmatic heartbleed-mem-leak.txt 127.0.0.1:8443

clienthello-heartbeat  PASS  contains "0e000000"
malformed-heartbeat    PASS  regex "18030[123]40"

result: verified (2/2)

Step 2

Replay an attack

The runtime takes a solution file and a target. The solution in the example replays the Heartbleed memory leak against a vulnerable OpenSSL server.

Flags may come before or after the positional arguments. Useful flags include -param, -flag-path, -timeout, and the OOB listener flags. The result line comes from the step asserts; it is derived, never stored.

CLI reference in the docs

Where to go next

Read how the format works, browse the corpus, or open the full documentation.

Get started Read the docs