python

So, when you don’t have metasploit or ruby in your environment and you need to run pattern_create.rb what do you do?

Well if you’ve got Python available you simply rewrite the code in python.

Here’s the code (it’s used in exactly the same way as the metasploit version of pattern create):

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152#!/usr/bin/env python # Author: phillips321 # Site: www.phillips321.co.uk # Version 0.1 # Credits: metasploit project # About: Replicates msf… Continue reading

So after using csharp to inject shellcode I wanted to see what other languages were able to directly write to and call memory locations.

As I’ve been working my way through The SecurityTube Python Scripting Expert course I decided it made sense to see if it was possible with python.

A quick google found me a href=”http://www.debasish.in/2012/04/execute-shellcode-using-python.html” target=”_blank”>this post by Debasish. FULL credit for this work goes to Debasish, this post is purely… Continue reading

So I got bored this evening and decided to write a quick and simple python SSH bruteforcer (I wanted to learn how to use paramiko).

It takes the dictionary in a user:pass format.

It’s not the most efficient as it uses a sleep (300ms) function, if i get the time to play i’ll use some form of thread queuing to ensure that you can throttle the requests. Might also be… Continue reading

So I’ve slowly been working my way through Security Tubes Python Scripting Expert (SPSE) course. But, I’ve not liked the way the python interpreter doesn’t have tab completion. After a little bit of digging I found the following so wanted to make sure I made a note of it and shared it with others.

Create a file in your home directory called .pyrc and insert the following lines into it:… Continue reading

So today I’ve been playing with python and decided to make an arp ping utility. When i get more time i’ll turn this into a simple arp scanner.

I know that this is all possible using scapy but the idea of this was to teach myself how raw sockets work within python.

This requires netifaces and a few other modules that can usually be obtained using sudo easy_install modulename (you’ll… Continue reading