jon1scr

Awesome Python

A curated list of awesome Python frameworks, libraries, software and resources.

Inspired by awesome-php.

• Awesome Python
  • Admin Panels
  • Algorithms and Design Patterns
• ASGI Servers

jon1scr

This is a technique for extracting all imported modules from a packaged Python application as .pyc files, then decompiling them. The target program needs to be run from scratch, but no debugging symbols are necessary (assuming an unmodified build of Python is being used).

This was originally performed on 64-bit Linux with a Python 3.6 target. The Python scripts have since been updated to handle pyc files for Python 2.7 - 3.9.

Theory

In Python we can leverage the fact that any module import involving a .py* file will eventually arrive as ready-to-execute Python code object at this function:

PyObject* PyEval_EvalCode(PyObject *co, PyObject *globals, PyObject *locals);

jon1scr

#!/usr/bin/env python3

"""
This module generates a passphrase using EFF's long word list (for use with five dice).

word list attribution:
    https://www.eff.org/deeplinks/2016/07/new-wordlists-random-passphrases


usage: passphrase_ex.py [-h] [-n NUMBER] [-s SEPARATOR]

jon1scr

jon1scr

from idautils import *
from idaapi import *
from ida_name import *
from idc import *
from ida_hexrays import *
from ida_frame import *
from ida_struct import *

INHERITANCE = {
    # Auto Object base classes.

jon1scr

#!/usr/bin/env python3
"""
Script used to pull down the current video descriptions from ippsec's youtube channel.
The raw output still has a few HTML tags that need to be manually removed and there
also seem to be multiple duplicates of videos that have been removed in the output
saved as ippsec-details.txt
"""
import re
import sys

jon1scr

😍 The beginners note for OSINT 📚

---

The number of OSINT tools and services is constantly growing (image via osintframework.com)

Definition:
(intentionally left blank)

jon1scr

DEEP WEB LINKS COLLECTION

Attempt to collect some sites in one list

Menu

• Hidden Service lists and search engines
• Marketplace Financial
• Marketplace Commercial Services
• Marketplace Drugs

jon1scr

#!/bin/bash 
# Web Application Pentest
clear 
echo "[!] Don't Run It As Root Never [!]"
sleep 2
mkdir ~/Tools/Web-Application-Pentest
cd ~/Tools/Web-Application-Pentest
# --------------------------------- #
mkdir ~/Tools/Web-Application-Pentest/Domain-Finding-Enum
mkdir ~/Tools/Web-Application-Pentest/General-Recon

jon1scr

#!/usr/bin/zsh

checkCodium=$(which codium)

if [ -z $checkCodium ]; then
	echo "[+] install VS codium"
	wget -qO - https://gitlab.com/paulcarroty/vscodium-deb-rpm-repo/raw/master/pub.gpg | gpg --dearmor | sudo dd of=/etc/apt/trusted.gpg.d/vscodium.gpg 
	echo 'deb https://paulcarroty.gitlab.io/vscodium-deb-rpm-repo/debs/ vscodium main' | sudo tee --append /etc/apt/sources.list.d/vscodium.list 
	sudo apt update && sudo apt install -y codium
else