pycdc

Decompyle++ A Python Byte-code Disassembler/Decompiler Decompyle++ aims to translate compiled Python byte-code back into valid and human-readable Python source code. While other projects have achieved this with varied success, Decompyle++ is unique in that it seeks to support byte-code from any...

rePy2exe

rePy2exe Reverse Engineering Tool for py2exe applications. Twitter: @4w4k3Official Prerequisites Linux cmake git python2.7 Cloning root@kitploit: git clone https://github.com/4w4k3/rePy2exe.git Running root@kitploit: python rePy2exe.py or root@kitploit: python2.7 rePy2exe.py Screenshot Authors...

meterssh

Tool Name: MeterSSH Written by: David Kennedy Company: TrustedSec Website: https://www.trustedsec.com Twitter: @TrustedSec, @HackingDave MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH...

python-exe-unpacker

作者：In Ming Loh [email protected] - @tantaryu 公司：Countercept @countercept 网站：https://www.countercept.com 简介 一个帮助研究人员解包并反编译用 Python 编写的可执行文件的脚本。不过，目前该脚本仅支持使用 py2exe 和 pyinstaller 创建的可执行文件。 该脚本整合了社区中可用的多个工具。希望这能帮助大家在日常工作中提高效率。脚本中提供了几条 YARA 规则，用于判断可执行文件是否由 Python 编写（该脚本同时也会确认可执行文件是由 py2exe 还是...

Python-based Spy RAT Emerges to Target FinTech

The Evilnum group, which specializes in targeting financial technology companies, has debuted a new tool: A Python-based remote access trojan RAT, dubbed PyVil. The malware’s emergence dovetails with a change in the chain of infection and an expansion of infrastructure for the APT. According to...

Stitch - Python Remote Administration Tool (RAT)

This is a cross platform python framework which allows you to build custom payloads for Windows, Mac OSX and Linux as well. You are able to select whether the payload binds to a specific IP and port, listens for a connection on a port, option to send an email of system info when the system boots,...

Antivirus Evasion Framework: Veil Framework

Antivirus Evasion Framework: Veil Framework The Veil-Framework is a collection of red team security tools that implement various attack methods focused on evading detection. It currently consists of: Veil-Evasion : a tool to generate antivirus-evading payloads using a variety of techniques and...

Deobfuscating Python Bytecode

Introduction During an investigation, the FLARE team came across an interesting Python malware sample MD5: 61a9f80612d3f7566db5bdf37bbf22cf that is packaged using py2exe. Py2exe is a popular way to compile and package Python scripts into executables. When we encounter this type of malware we...

[AFF v0.1] Anonymous FTP Finder

Anonymous FTP Scanner AFF is a Security tool for penetration testers, network admins etc. The tool is written in Python with wxPython as GUI and compiled with Py2exe. AFF can scan large networks for Anonymous FTP Servers and regular FTP:s. Example of Anonymous FTP Server is network equipment, Mul...

[Veil v1.2] A Payload Generator to Bypass Antivirus

Veil is a tool designed to generate metasploit payloads that bypass common anti-virus solutions. Veil was designed to run on Kali Linux, but should function on any system capable of executing python scripts. Simply call Veil from the command line, and follow the menu to generate a payload. Upon...