This is a repository filled with scripts that were made with Python, and designed to exploit computer systems.

Overview

PYTHON-EXPLOITATION

This is a repository filled with scripts that were made with Python, and designed to exploit computer systems.

Networking

tcp_clinet.py

The tcp_clinet.py script is used to push data to a server in the event that you are not able to use the typical networking tools. In the script we:

  • Create a socket object (line 8): the AF_INET parameter indicates we will use a standard IPv4 address or hostname, and SOCK_STREAM indicates that this will be a TCP client.
  • Connect to the client server (line 11): note that, since we are using a TCP client, we must first connect to our server (via the TCP handshake) to send data to it.
  • Send the server some data in bytes (line 14)
  • Recieve data back from the server and print out the response (line 17)

    Note that this script makes numerous assumptions about the server we are engaging with:

  • It assumes that our connection will always succeed as it does not have a fallback function in the event that the server rejects our connection.
  • It assumes that the server expects us to send data first. Sometimes, the server will want to send us data first - this is especially true if the server is being guarded by a firewall of some kind.
  • The script assumes that the server will always return data to us in a timely fashion.

    The assumptions are made for simplicity's sake. All things considered, sometimes less is more.

    udp_client.py

    Our udp_client.py script is much different from our tcp script, only that it it configured to send data via the user datagram protocol (but that much was obvious):

    • We change the socket type to SOCK_DGRAM to indicate that we will be using sending data via the UDP (line 6).
    • Also, notice that there is no connect() method beforehand, since we do not need to connect to a server beforehand using UDP. This is because UDP is a connectionaless protocol.
    • The last step is to call the recvfrom() method to receive UDP data back. This returns both the data and the details of the remote host and port (line 9).

    tcp_server.py

    The tcp_server.py is just that, a multi-threaded python TCP server that we can use in the event we want to write a command shell or craft a proxy.

    • Firstly, we pass in the IP address and port we want the server to listen on (line 9).
    • Next, we tell the server to simply start listening with a max backlog of connections set to 5 (line 10). Now ther server waits for a connection.
    • Once the clinet connects, we get the client socket in the client variable and the remote connection details in teh address variable.
    • We tehn start the thread to handle the client connection (line 17).
    • The handle_client function performs rec() and then sens a simple message back to the client.
  • Owner
    Nathan Galindo
    Hi, my name is Nathan Galindo and I am a cybersecurity student at Baylor University!
    Nathan Galindo
    Scans all drives for log4j jar files and gets their version from the manifest

    log4shell_scanner Scans all drives for log4j jar files and gets their version from the manifest. Windows and Windows Server only.

    Zdeněk Loučka 1 Dec 29, 2021
    This project is all about building an amazing application that will help users manage their passwords and even generate new passwords for them

    An amazing application that will help us manage our passwords and even generate new passwords for us.

    1 Jan 23, 2022
    Steal Files on a Windows Machine

    File-Stealer Steal Files on a Windows Machine About This Script will steal certain Files on a Windows Machine and sends them to a FTP Server. Preview

    Marcel 5 Nov 17, 2022
    An ARP Spoofer attacker for windows to block away devices from your network.

    arp0_attacker An ARP Spoofer-attacker for Windows -OS to block away devices from your network. INFO Built in Python 3.8.2. arp0_attackerx.py is Upgrad

    Wh0_ 15 Mar 17, 2022
    Scanner for Intranet

    cthun3是集成端口扫描,服务识别,netbios扫描,网站识别,暴力破解和漏洞扫描的工具. cthun(克苏恩)是魔兽世界电子游戏中一位上古之神 截图 cthun3结合viper使用时截图 使用方法 端口扫描 -ps-ip 端口扫描的ip地址范围,例如可以输入 -ps-ip 192.168.14

    rootkit 18 Sep 03, 2022
    PySharpSphere - Inspired by SharpSphere, just another python version

    PySharpSphere Inspired by SharpSphere, just another python version. Installation python3 setup.py install Features Support control both Linux and Wind

    Ricter Zheng 191 Dec 22, 2022
    NS-LOOKUP - A python script for scanning website for getting ip address of a website

    NS-LOOKUP A python script for scanning website for getting ip address of a websi

    Spider Anongreyhat 5 Aug 02, 2022
    A python module for retrieving and parsing WHOIS data

    pythonwhois A WHOIS retrieval and parsing library for Python. Dependencies None! All you need is the Python standard library. Instructions The manual

    Sven Slootweg 384 Dec 23, 2022
    Sudo Baron Samedit Exploit

    CVE-2021-3156 (Sudo Baron Samedit) This repository is CVE-2021-3156 exploit targeting Linux x64. For writeup, please visit https://datafarm-cybersecur

    Worawit Wang 559 Jan 03, 2023
    An forensics tool to help aid in the investigation of spoofed emails based off the email headers.

    A forensic tool to make analysis of email headers easy to aid in the quick discovery of the attacker. Table of Contents About mailMeta Installation Us

    Syed Modassir Ali 59 Nov 26, 2022
    Visius Heimdall is a tool that checks for risks on your cloud infrastructure

    Heimdall Cloud Checker 🇧🇷 About Visius is a Brazilian cybersecurity startup that follows the signs of the crimson thunder ;) 🎸 ! As we value open s

    visius 48 Jun 20, 2022
    Tinyman exploit finder - Tinyman exploit finder for python

    tinyman_exploit_finder There was a big tinyman exploit. You can read about it he

    fish.exe 9 Dec 27, 2022
    Send CVE information to the specified mailbox (from Github)

    Send CVE information to the specified mailbox (from Github)

    91 Nov 08, 2022
    A Python wrapper around the OpenSSL library

    pyOpenSSL -- A Python wrapper around the OpenSSL library Note: The Python Cryptographic Authority strongly suggests the use of pyca/cryptography where

    Python Cryptographic Authority 795 Dec 29, 2022
    Exploiting CVE-2021-44228 in VMWare Horizon for remote code execution and more.

    Log4jHorizon Exploiting CVE-2021-44228 in VMWare Horizon for remote code execution and more. BLOG COMING SOON Code and README.md this time around are

    96 Dec 14, 2022
    IDA plugin for quickly copying disassembly as encoded hex bytes

    HexCopy IDA plugin for quickly copying disassembly as encoded hex bytes. This whole plugin just saves you two extra clicks... but if you are frequentl

    OALabs 46 Oct 30, 2022
    Metal Gear Online 2 (MGO2) stage files decryption

    Metal Gear Online 2 decryption tool Metal Gear Online 2 (MGO2) has an additional layer of encryption for stage files. I was not able to find info abou

    4 Sep 02, 2022
    ♻️ Password Generator (PSG) 📚 This plugin is made for more familiarity with Python, but can also be used to create passwords

    About Tool This plugin is made for more familiarity with Python, but can also be used to create passwords.

    STgazing 2 Jul 23, 2022
    Sqli-Scanner is a python3 script written to scan websites for SQL injection vulnerabilities

    Sqli-Scanner is a python3 script written to scan websites for SQL injection vulnerabilities Features 1 Scan one website 2 Scan multiple websites Insta

    Anontemitayo 9 Dec 30, 2022
    Dumping revelant information on compromised targets without AV detection

    DonPAPI Dumping revelant information on compromised targets without AV detection DPAPI dumping Lots of credentials are protected by DPAPI (link ) We a

    Login Securite 580 Jan 09, 2023