1
#!/usr/bin/env bash
2

3
set -Eeuo pipefail
4

5
trap 'echo "[-] 第 ${LINENO} 行执行失败。"' ERR
6

7
TOOLS_DIR="${HOME}/tools"
8

9
ROPPER_DIR="${TOOLS_DIR}/ropper"
10
ROPPER_VENV="${ROPPER_DIR}/.venv"
11
ROPPER_BIN="${ROPPER_VENV}/bin/ropper"
12
ROPPER_LINK="/usr/local/bin/ropper"
13

14
PWNDBG_DIR="${TOOLS_DIR}/pwndbg"
15
PWNDB_DIR="${TOOLS_DIR}/Pwngdb"
16

17
GDBINIT="${HOME}/.gdbinit"
18

19
if [[ "${EUID}" -eq 0 ]]; then
20
    echo "[-] 请使用普通用户运行，不要执行 sudo $0"
21
    exit 1
22
fi
23

24
echo "[+] 获取 sudo 权限……"
25
sudo -v
26

27
echo "[+] 安装系统依赖……"
28
sudo apt update
29

30
sudo apt install -y \
31
    libxml2-dev \
32
    libxslt-dev \
33
    python3-pip \
34
    python3-venv \
35
    python3-full \
36
    python3-dev \
37
    python3-setuptools \
38
    libffi-dev \
39
    curl \
40
    clang \
41
    make \
42
    build-essential \
43
    libncursesw5-dev \
44
    libgdbm-dev \
45
    libc6-dev \
46
    libc6-dbg \
47
    tk-dev \
48
    openssl \
49
    git \
50
    gdb \
51
    gdbserver \
52
    ruby \
53
    ruby-dev \
54
    patchelf \
55
    python3-pwntools
56

57
echo "[+] 检查 uv……"
58

59
if ! command -v uv >/dev/null 2>&1; then
60
    curl -LsSf https://astral.sh/uv/install.sh | sh
61
fi
62

63
export PATH="${HOME}/.local/bin:${HOME}/.cargo/bin:${PATH}"
64

65
if ! command -v uv >/dev/null 2>&1; then
66
    echo "[-] uv 安装失败或不在 PATH 中。"
67
    exit 1
68
fi
69

70
UV_BIN="$(command -v uv)"
71

72
echo "[+] 创建 Ropper 虚拟环境……"
73

74
mkdir -p "${ROPPER_DIR}"
75

76
"${UV_BIN}" python install 3.12
77

78
"${UV_BIN}" venv \
79
    --clear \
80
    --python 3.12 \
81
    "${ROPPER_VENV}"
82

83
echo "[+] 安装 Ropper 及相关软件包……"
84

85
"${UV_BIN}" pip install \
86
    --python "${ROPPER_VENV}/bin/python" \
87
    capstone \
88
    filebytes \
89
    unicorn \
90
    keystone-engine \
91
    ropper
92

93
echo "[+] 创建 Ropper 全局命令……"
94

95
if [[ -e "${ROPPER_LINK}" && ! -L "${ROPPER_LINK}" ]]; then
96
    echo "[-] ${ROPPER_LINK} 已存在且不是符号链接。"
97
    exit 1
98
fi
99

100
sudo mkdir -p /usr/local/bin
101
sudo ln -sfn "${ROPPER_BIN}" "${ROPPER_LINK}"
102

103
echo "[+] 安装 Ruby 工具……"
104

105
sudo gem install --no-document one_gadget
106
sudo gem install --no-document seccomp-tools
107

108
mkdir -p "${TOOLS_DIR}"
109

110
clone_or_update() {
111
    local repository="$1"
112
    local directory="$2"
113

114
    if [[ -d "${directory}/.git" ]]; then
115
        echo "[+] 更新 $(basename "${directory}")……"
116
        git -C "${directory}" pull --ff-only
117
    elif [[ -e "${directory}" ]]; then
118
        echo "[-] ${directory} 已存在，但不是 Git 仓库。"
119
        exit 1
120
    else
121
        echo "[+] 克隆 $(basename "${directory}")……"
122
        git clone "${repository}" "${directory}"
123
    fi
124
}
125

126
clone_or_update \
127
    "https://github.com/pwndbg/pwndbg.git" \
128
    "${PWNDBG_DIR}"
129

130
clone_or_update \
131
    "https://github.com/scwuaptx/Pwngdb.git" \
132
    "${PWNDB_DIR}"
133

134
echo "[+] 安装 pwndbg……"
135

136
(
137
    cd "${PWNDBG_DIR}"
138
    bash ./setup.sh
139
)
140

141
echo "[+] 配置 ~/.gdbinit……"
142

143
if [[ -f "${GDBINIT}" ]]; then
144
    GDBINIT_BACKUP="${GDBINIT}.backup.$(date +%Y%m%d-%H%M%S)"
145
    cp -a "${GDBINIT}" "${GDBINIT_BACKUP}"
146
    echo "[+] 原配置已备份到 ${GDBINIT_BACKUP}"
147
fi
148

149
cp "${PWNDB_DIR}/.gdbinit" "${GDBINIT}"
150

151
sed -i \
152
    -e '1c\source ~/tools/pwndbg/gdbinit.py' \
153
    -e '2c\source ~/tools/Pwngdb/pwngdb.py' \
154
    -e '3c\source ~/tools/Pwngdb/angelheap/gdbinit.py' \
155
    "${GDBINIT}"
156

157
chmod 600 "${GDBINIT}"
158

159
echo "[+] 验证安装……"
160

161
"${ROPPER_LINK}" --help >/dev/null
162
command -v one_gadget >/dev/null
163
command -v seccomp-tools >/dev/null
164

165
echo
166
echo "[+] 安装完成。"
167
echo
168
echo "Ropper:"
169
echo "  ${ROPPER_LINK} -> ${ROPPER_BIN}"
170
echo
171
echo "项目目录:"
172
echo "  ${PWNDBG_DIR}"
173
echo "  ${PWNDB_DIR}"
174
echo
175
echo "GDB 配置:"
176
head -n 3 "${GDBINIT}"
177
echo
178
echo "可直接使用:"
179
echo "  gdb ./程序"
180
echo "  ropper --file ./程序"
181
echo "  one_gadget ./libc.so.6"
182
echo "  seccomp-tools dump ./程序"

1
[user]
2
default=newname