Python malware development: creating a reverseShell part 1

-
Ever thought about the security breaches that go unnoticed, those the happen and the lowest level in the computer world(rootkits with enhanced virus abilities), those the happen within the architectural realms of a machine, welcome aboard. On this channel you will learn everything about that from rootkits/ anti-rootkit technologies,viruses/ anti-viruses technologies,spyware/anti-spyware technologies, Architecture-assembly programming, Architecture-OS internals, kernel and driver programming, firmware security and many more.

Comments

Post a Comment

Check out our works

WINDOWS SYSTEM PROGRAMMING WITH C/C++

-
  Windows System Architecture History Windows was originally a 16-bit graphical layer for MS-DOS that was written by Microsoft.As it grew, it gained the ability to handle 32-bit programs and eventually became totally 32-bit when Windows NT and 2000 came out. After Windows 95, Microsoft began to remove dependencies on DOS and finally fully implemented the separation in Windows 2000. Windows has many advanced features as well as many platform specific problems. It possesses an Application Programming Interface that consists of thousands of mostly undocumented GUI functions as well as having varying degrees of MS-DOS compatibility. Additionally, with the advent of NT (New Technology), Windows relies completely on the NT kernel instead of its MS-DOS subsystem, the NT kernel is capable of emulating the necessary DOS functionality. In addition to the NT kernel, Microsoft has also introduced many API wrappers, such as the MFCs (Microsoft Foundation Classes), COM (Component Object Model), an...
Read more

PYTHON PROGRAMMING IN AND OUT

-
Image
PYTHON FOR ALL   Python is a high-level, interpreted, interactive and object-oriented scripting language. Python is designed to be highly readable. It uses English keywords frequently where as other languages use punctuation, and it has fewer syntactical constructions than other languages. Python is Interpreted − Python is processed at runtime by the interpreter. You do not need to compile your program before executing it. This is similar to PERL and PHP. Python is Interactive − You can actually sit at a Python prompt and interact with the interpreter directly to write your programs. Python is Object-Oriented − Python supports Object-Oriented style or technique of programming that encapsulates code within objects. Python is a Beginner's Language − Python is a great language for the beginner-level programmers and supports the development of a wide range of applications from simple text processing to WWW browsers to games. Python is an open-source and cross-platform pro...
Read more

Creating a Reverse Shell in Python

-
lntroduction There are many ways to gain control over a compromised system. A common practice is to gain interactive shell access, which enables you to try to gain complete control of the operating system. However, most basic firewalls block direct remote connections. One of the methods to bypass this is to use reverse shells. A reverse shell is a program that executes local cmd.exe (for Windows) or bash/zsh (for Unix-like) commands and sends the output to a remote machine. With a reverse shell, the target machine initiates the connection to the attacker machine, and the attacker's machine listens for incoming connections on a specified port; this will bypass firewalls. The basic idea of the code we will implement is that the attacker's machine will keep listening for connections. Once a client (or target machine) connects, the server will send shell commands to the target machine and expect output results.  full code on github:https://github.com/theKlaytonLabs...
Read more

Network programming in python with examples

-
GETING A HOST NAME >>> import socket >>> host_name = socket.gethostname() >>> print ("Host name: %s" %host_name) >>> print ("IP address: %s",host_name) GETTING A HOST NAME WITH A FUNCTION DEFINITION import socket def print_machine_info():      host_name = socket.gethostname()      ip_address = socket.gethostbyname(host_name)      print ("Host name: " ,host_name)      print ("IP address: " ,ip_address) if __name__ == '__main__':      print_machine_info() The hostname is what you assigned to your computer when you configured your operating system. This output will be different on your machine depending on the system's host configuration. Here hostname indicates where the Python interpreter is currently executing. Retrieving a remote machine's IP address If you need to know the IP address of a remote machine, you can use a built-in library function, gethostbyname(). In this c...
Read more