This is a repository filled with scripts that were made with Python, and designed to exploit computer systems.

Overview

PYTHON-EXPLOITATION

This is a repository filled with scripts that were made with Python, and designed to exploit computer systems.

Networking

tcp_clinet.py

The tcp_clinet.py script is used to push data to a server in the event that you are not able to use the typical networking tools. In the script we:

  • Create a socket object (line 8): the AF_INET parameter indicates we will use a standard IPv4 address or hostname, and SOCK_STREAM indicates that this will be a TCP client.
  • Connect to the client server (line 11): note that, since we are using a TCP client, we must first connect to our server (via the TCP handshake) to send data to it.
  • Send the server some data in bytes (line 14)
  • Recieve data back from the server and print out the response (line 17)

    Note that this script makes numerous assumptions about the server we are engaging with:

  • It assumes that our connection will always succeed as it does not have a fallback function in the event that the server rejects our connection.
  • It assumes that the server expects us to send data first. Sometimes, the server will want to send us data first - this is especially true if the server is being guarded by a firewall of some kind.
  • The script assumes that the server will always return data to us in a timely fashion.

    The assumptions are made for simplicity's sake. All things considered, sometimes less is more.

    udp_client.py

    Our udp_client.py script is much different from our tcp script, only that it it configured to send data via the user datagram protocol (but that much was obvious):

    • We change the socket type to SOCK_DGRAM to indicate that we will be using sending data via the UDP (line 6).
    • Also, notice that there is no connect() method beforehand, since we do not need to connect to a server beforehand using UDP. This is because UDP is a connectionaless protocol.
    • The last step is to call the recvfrom() method to receive UDP data back. This returns both the data and the details of the remote host and port (line 9).

    tcp_server.py

    The tcp_server.py is just that, a multi-threaded python TCP server that we can use in the event we want to write a command shell or craft a proxy.

    • Firstly, we pass in the IP address and port we want the server to listen on (line 9).
    • Next, we tell the server to simply start listening with a max backlog of connections set to 5 (line 10). Now ther server waits for a connection.
    • Once the clinet connects, we get the client socket in the client variable and the remote connection details in teh address variable.
    • We tehn start the thread to handle the client connection (line 17).
    • The handle_client function performs rec() and then sens a simple message back to the client.
  • Owner
    Nathan Galindo
    Hi, my name is Nathan Galindo and I am a cybersecurity student at Baylor University!
    Nathan Galindo
    Natural Language Processing - Sommer Semester 2022

    Natural Language Processing (DIS25a/NLP) This course can be taken for the Bachelor Programm Data and Information Science (DIS25a) or the Master Progra

    Classrooms of IR Group at Technische Hochschule Köln 19 Sep 07, 2022
    This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.

    webapp-wordlists This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version co

    Podalirius 396 Jan 08, 2023
    CC CAMERA HACKING TOOL

    CAM-HACK CC CAMERA HACKING TOOL Installation On Termux $ apt update

    Aryan 10 Sep 25, 2022
    SeaSurf is a Flask extension for preventing cross-site request forgery (CSRF).

    Flask-SeaSurf SeaSurf is a Flask extension for preventing cross-site request forgery (CSRF). CSRF vulnerabilities have been found in large and popular

    Max Countryman 183 Dec 28, 2022
    一款针对向日葵的识别码和验证码提取工具

    Sunflower_get_Password 一款针对向日葵的识别码和验证码提取工具 👮🏻‍♀️ 免责声明 由于传播、利用Sunflower_get_Password工具提供的功能而造成的任何直接或者间接的后果及损失,均由使用者本人负责,本人不为此承担任何责任。 安装环境 本工具使用Python

    635 Dec 20, 2022
    EMBArk - The firmware security scanning environment

    Embark is being developed to provide the firmware security analyzer emba as a containerized service and to ease accessibility to emba regardless of system and operating system.

    emba 175 Dec 14, 2022
    Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API

    ScratchABit is an interactive incremental disassembler with data/control flow analysis capabilities. ScratchABit is dedicated to the effor

    Paul Sokolovsky 380 Dec 28, 2022
    A traceroute tool that also displays IP information

    infotr A traceroute tool that also displays IP information. This tool has only been tested on Linux. Quick Start First, install this tool from PyPI. p

    K4YT3X 10 Oct 29, 2022
    Python APK Reverser & Patcher Tool

    DTL-X An Advanced Python APK Reverser and Patcher Tool. --rmads1: target=AndroidManifest.xml,replace=com.google.android.gms.ad --rmads2: No Internet (

    DedSecTL 10 Oct 31, 2022
    C++ fully undetected shellcode launcher

    charlotte c++ fully undetected shellcode launcher ;) releasing this to celebrate the birth of my newborn description 13/05/2021: c++ shellcode launche

    894 Dec 25, 2022
    A curated list of amazingly awesome Cybersecurity datasets

    A curated list of amazingly awesome Cybersecurity datasets

    758 Dec 28, 2022
    Dahua IPC/VTH/VTO devices auth bypass exploit

    CVE-2021-33044 Dahua IPC/VTH/VTO devices auth bypass exploit About: The identity authentication bypass vulnerability found in some Dahua products duri

    Ashish Kunwar 23 Dec 02, 2022
    An Advanced Local Network IP Scanner, made in python of course!

    ██╗██████╗    ██████╗ █████╗ █████╗ ███╗ ██╗███╗ ██╗███████╗██████╗ ██║██╔══██╗  ██╔════╝██╔══██╗██╔══██╗████╗ ██║████╗ ██║██╔════╝██╔══██

    Polsulpicien 2 Dec 18, 2021
    NoSecerets is a python script that is designed to crack hashes extremely fast. Faster even than Hashcat

    NoSecerets NoSecerets is a python script that is designed to crack hashes extremely fast. Faster even than Hashcat How does it work? Instead of taking

    DosentTrust GithubDatabase 9 Jul 04, 2022
    python写的一款免杀工具(shellcode加载器)BypassAV,国内杀软全过(windows denfend)

    python写的一款免杀工具(shellcode加载器)BypassAV,国内杀软全过(windows denfend)

    1frame 266 Jan 02, 2023
    The Decompressoin tool for Vxworks MINIFS

    MINIFS-Decompression The Decompression tool for Vxworks MINIFS filesystem. USAGE python minifs_decompression.py [target_firmware] The example of Mercu

    8 Jan 03, 2023
    Sample exploits for Zephyr CVE-2021-3625

    CVE-2021-3625 This repository contains a few example exploits for CVE-2021-3625. All Zephyr-based usb devices up to (and including) version 2.5.0 suff

    7 Nov 10, 2022
    A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.

    TProxer A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF. How • Install • Todo • Join Discord How it works

    Krypt0mux 162 Nov 25, 2022
    Security audit Python project dependencies against security advisory databases.

    Security audit Python project dependencies against security advisory databases.

    52 Dec 17, 2022
    PortSwigger Burp Plugin for the Log4j (CVE-2021-44228)

    yLog4j This is Y-Sec's @PortSwigger Burp Plugin for the Log4j CVE-2021-44228 vulnerability. The focus of yLog4j is to support mass-scanning of the Log

    Y-Security 1 Jan 31, 2022