This is a repository filled with scripts that were made with Python, and designed to exploit computer systems.

Overview

PYTHON-EXPLOITATION

This is a repository filled with scripts that were made with Python, and designed to exploit computer systems.

Networking

tcp_clinet.py

The tcp_clinet.py script is used to push data to a server in the event that you are not able to use the typical networking tools. In the script we:

  • Create a socket object (line 8): the AF_INET parameter indicates we will use a standard IPv4 address or hostname, and SOCK_STREAM indicates that this will be a TCP client.
  • Connect to the client server (line 11): note that, since we are using a TCP client, we must first connect to our server (via the TCP handshake) to send data to it.
  • Send the server some data in bytes (line 14)
  • Recieve data back from the server and print out the response (line 17)

    Note that this script makes numerous assumptions about the server we are engaging with:

  • It assumes that our connection will always succeed as it does not have a fallback function in the event that the server rejects our connection.
  • It assumes that the server expects us to send data first. Sometimes, the server will want to send us data first - this is especially true if the server is being guarded by a firewall of some kind.
  • The script assumes that the server will always return data to us in a timely fashion.

    The assumptions are made for simplicity's sake. All things considered, sometimes less is more.

    udp_client.py

    Our udp_client.py script is much different from our tcp script, only that it it configured to send data via the user datagram protocol (but that much was obvious):

    • We change the socket type to SOCK_DGRAM to indicate that we will be using sending data via the UDP (line 6).
    • Also, notice that there is no connect() method beforehand, since we do not need to connect to a server beforehand using UDP. This is because UDP is a connectionaless protocol.
    • The last step is to call the recvfrom() method to receive UDP data back. This returns both the data and the details of the remote host and port (line 9).

    tcp_server.py

    The tcp_server.py is just that, a multi-threaded python TCP server that we can use in the event we want to write a command shell or craft a proxy.

    • Firstly, we pass in the IP address and port we want the server to listen on (line 9).
    • Next, we tell the server to simply start listening with a max backlog of connections set to 5 (line 10). Now ther server waits for a connection.
    • Once the clinet connects, we get the client socket in the client variable and the remote connection details in teh address variable.
    • We tehn start the thread to handle the client connection (line 17).
    • The handle_client function performs rec() and then sens a simple message back to the client.
  • Owner
    Nathan Galindo
    Hi, my name is Nathan Galindo and I am a cybersecurity student at Baylor University!
    Nathan Galindo
    Log4j minecraft with python

    Apache-Log4j Apache Log4j 远程代码执行 攻击者可直接构造恶意请求,触发远程代码执行漏洞。漏洞利用无需特殊配置,经阿里云安全团队验证,Apache Struts2、Apache Solr、Apache Druid、Apache Flink等均受影响 Steps 【Import

    manmade 57 Oct 03, 2022
    Multi Brute Force Facebook - Crack Facebook With Login - Free For Now

    ✭ SAKERA CRACK Made With ❤️ By Denventa, Araya, Dapunta Author: - Denventa - Araya Dev - Dapunta Khurayra X ⇨ Fitur Login [✯] Login Cookies ⇨ Ins

    Dapunta ID 26 Jan 01, 2023
    A curated list of amazingly awesome Cybersecurity datasets

    A curated list of amazingly awesome Cybersecurity datasets

    758 Dec 28, 2022
    This is simple python FTP password craker. To crack FTP login using wordlist based brute force attack

    This is simple python FTP password craker. To crack FTP login using wordlist based brute force attack

    Varun Jagtap 5 Oct 08, 2022
    A forensic collection tool written in Python.

    CHIRP A forensic collection tool written in Python. Watch the video overview 📝 Table of Contents 📝 Table of Contents 🧐 About 🏁 Getting Started Pre

    Cybersecurity and Infrastructure Security Agency 1k Dec 09, 2022
    RedDrop is a quick and easy web server for capturing and processing encoded and encrypted payloads and tar archives.

    RedDrop Exfil Server Check out the accompanying MaverisLabs Blog Post Here! RedDrop Exfil Server is a Python Flask Web Server for Penetration Testers,

    53 Nov 01, 2022
    SSRF search vulnerabilities exploitation extended.

    This tool search for SSRF using predefined settings in different parts of a request (path, host, headers, post and get parameters).

    Andri Wahyudi 13 Jul 04, 2021
    Using python 3 and Flask an MVC system where the AES 128 CBC and Trivium algorithms

    This project was developed using python 3 and Flask, it is an MVC system where the AES 128 CBC and Trivium algorithms can be tested through a communication between the computer and a device such as a

    Brandon Israel Camacho Reyes 1 Dec 26, 2021
    An OSINT tool that searches for devices directly connected to the internet (IoT) with a user specified query. It returns results for Webcams, Traffic lights, Refridgerators, Smart TVs etc.

    An OSINT tool that searches for devices directly connected to the internet (IoT) with a user specified query. It returns results for Webcams, Traffic

    Richard Mwewa 48 Nov 20, 2022
    Log4j exploit catcher, detect Log4Shell exploits and try to get payloads.

    log4j_catcher Log4j exploit catcher, detect Log4Shell exploits and try to get payloads. This is a basic python server that listen on a port and logs i

    EntropyQueen 17 Dec 20, 2021
    Local File Inclusion Scanner and Exploiter

    LFI-Paradise Local File Inclusion Scanner and Exploiter Features 1- Scanner 2- E

    11 Sep 04, 2022
    Glass是一款针对资产列表的快速指纹识别工具,通过调用Fofa/ZoomEye/Shodan/360等api接口

    Glass是一款针对资产列表的快速指纹识别工具,通过调用Fofa/ZoomEye/Shodan/360等api接口快速查询资产信息并识别重点资产的指纹,也可针对IP/IP段或资产列表进行快速的指纹识别。

    s7ck Team 764 Jan 05, 2023
    the metasploit script(POC/EXP) about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability

    CVE-2021-22005-metasploit the metasploit script(POC/EXP) about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability pr

    Taroballz 25 Nov 15, 2022
    对naabu的端口扫描结果,调用nmap进行指纹识别

    naabu2nmap 对naabu的端口扫描结果,调用nmap进行指纹识别

    Se7en 12 Nov 22, 2022
    A small Minecraft server to help players detect vulnerability to the Log4Shell exploit 🐚

    log4check A small Minecraft server to help players detect vulnerability to the Log4Shell exploit 🐚 Tested to work between Minecraft versions 1.12.2 a

    Evan J. Markowitz 4 Dec 23, 2021
    GRR Rapid Response: remote live forensics for incident response

    GRR Rapid Response is an incident response framework focused on remote live forensics. Build Type Status Tests End-to-end Tests Windows Templates Linu

    Google 4.3k Jan 05, 2023
    AMC- Automatic Media Access Control [MAC] Address Spoofing Tool

    AMC (Automatic Media Access Control [MAC] Address Spoofing tool), helps you to protect your real network hardware identity. Each entered time interval your hardware address was changed automatically.

    Dipen Chavan 14 Dec 23, 2022
    Password Manager is a simple Python project which helps users in managing their passwords in a easier way

    Password Manager is a simple Python project which helps users in managing their passwords in a easier way

    Manish Jalui 4 Sep 29, 2021
    Python HDFS client

    Python HDFS client Because the world needs yet another way to talk to HDFS from Python. Usage This library provides a Python client for WebHDFS. NameN

    Jing Wang 82 Dec 28, 2022
    Python bindings to LibreSSL library

    LibreSSL bindings for Python using CFFI Python3 bindings to LibreSSL using CFFI. It aims to provide interface to the most important bits of LibreSSL o

    Alexander Kiselyov 1 Aug 02, 2022