JuanjoSalvador

#panel {
  background-gradient-direction: none;
  background-color: #1d2128;
  border-radius: 7px;
  margin-top: 3px;
  margin-bottom: 3px;
  margin-left: 10px;
  margin-right: 10px;
  height: 35px;
	

JuanjoSalvador

HOW-TO: Python code injection

A really, REALLY SIMPLE example of how we can inject malicius code into a Python script. For learning and documentation purposes.

Base script.

This is an unoffuscated version of our malicious code (actually dummy and completely safe).

import datetime 
print(int(datetime.datetime.now().timestamp() * 100000))

JuanjoSalvador

FROM alpine:latest
MAINTAINER Juanjo Salvador "juanjosalvador@netc.eu"

RUN apk add python3
COPY ./app.py /app/app.py

ENTRYPOINT ["python3", "/app/app.py"]

JuanjoSalvador

import tweepy
import csv

from datetime import date, timedelta, datetime

CONSUMER_KEY = ''
CONSUMER_SECRET = ''
ACCESS_TOKEN = ''
ACCESS_TOKEN_SECRET = ''

JuanjoSalvador

#!/bin/bash

systemd-cgtop | grep mastodon* | awk 'BEGIN { printf "%-28s %s", "SERVICE", "MEMORY USAGE\n";
                                              printf "%-28s %s", "-------", "------------\n" }

                                            { printf "%-30s %10s\n",  substr($1, 15), $4 }'

JuanjoSalvador

[DEFAULT]
API_KEY = SET YOUR BOT API KEY HERE
CHANNEL_NAME = SET YOUR @channelname HERE

JuanjoSalvador

Requirements

• vim-plug (https://github.com/junegunn/vim-plug)
• powerline (pip install powerline)

Install

• Copy init.vim into your vim/neovim config (~/.vimrc or ~/.config/nvim/init.vim).
• Run :PlugInstall command.
• Reload.

JuanjoSalvador

#%{$fg_bold[green]%}%n@%m %{$reset_color%}

PROMPT=$'%{$fg[blue]%}[%~]%{$reset_color%} $(git_prompt_info) %{$fg_bold[red]%}→%{$reset_color%} '

ZSH_THEME_GIT_PROMPT_PREFIX="%{$fg[green]%}["
ZSH_THEME_GIT_PROMPT_SUFFIX="]%{$reset_color%}"
ZSH_THEME_GIT_PROMPT_DIRTY=" %{$fg[red]%}*%{$fg[green]%}"
ZSH_THEME_GIT_PROMPT_CLEAN=""

JuanjoSalvador

Keybase proof

I hereby claim:

• I am JuanjoSalvador on github.
• I am jsalvador (https://keybase.io/jsalvador) on keybase.
• I have a public key whose fingerprint is 8650 335F 9B32 25FC 2E18 5395 71EC 2F5C B6EB CF5A

To claim this, I am signing this object:

JuanjoSalvador

#!/bin/bash

VERSIONS="buster|bullseye|bookworm"
BRANCHES="stable|devel|staging"

if [ "${UID}" -eq 0 ] ; then

ARCH=$(dpkg --print-architecture)

  if [ "${ARCH}" == "amd64" ] ; then