Python
Python Extensions
Docker
IntelliCode
Pylance
Python Snippets 3
Tabnine AI Autocomplete for Javascript, Python, Typescript, PHP, Go, Java, Ruby & more
Test Adapter Converter
Test Explorer UI
Installing Python 3.8
#Ubuntu 18.04, Ubuntu 20.04 and above
#Python 3.8 doesn’t come by default on Ubuntu 18.04 and above, but it is available in the Universe repository. To install version 3.8
sudo apt-get update
sudo apt-get install python3.8 python3-pip
#Linux Mint and Ubuntu 17 and below
#Python 3.8 isn’t in the Universe repository, so you need to get it from a Personal Package Archive (PPA). For example, to install from the [“deadsnakes” PPA](https://launchpad.net/~deadsnakes/+archive/ubuntu/ppa)
sudo add-apt-repository ppa:deadsnakes/ppa
sudo apt-get update
sudo apt-get install python3.8 python3-pip
#You can run Python 3.8 with the python3.8 command and run pip with the pip3 command.
orbitaldump - Python SSH Brute force
pip install -U --user orbitaldump
orbitaldump
git clone https://github.com/k4yt3x/orbitaldump.git
cd orbitaldump
python -m orbitaldump
Usages
A simple usage is shown below. This command below:
t 10: launch 10 brute-forcing threads
u usernames.txt: read usernames from usernames.txt (one username per line)
p passwords.txt: read passwords from passwords.txt (one password per line)
h example.com: set brute-forcing target to example.commands
-proxies: launch attacks over proxies from ProxyScrape
python -m orbitaldump -t 2 -u usernames.txt -p passwords.txt -h example.com --proxies
FTP Server
(https://pypi.org/project/python-ftp-server/)
pip install python-ftp-server
#Navigate to the folder you want to run FTP in
python3 -m python_ftp_server
#Once started, It will give you the port and login
#Local address: ftp://<IP>:60000
#User: <USER>
#Password: <PASSWORD>
#You can start service anonymous
python3 -m python_ftp_server -u anonymous
HTTP Server
This will run http file browser on port 8000, you can change the default port if needed.
Python_fundamentals
Array/list
my_list = [1,"string",3,4,5]
for item in my_list:
print item
Append/push to list
my_list.append("addMe")
Modules
Always good to modular your code.
module1.py
script.py
Pip - package management
Pip is the python package manager. It ca be used to download other modules.
Install pip
To install package
Useful Scripts
Make Request
Sometimes we might want to make a request to a website programmatically. Instead of having to visit the page in the browser. In Python we can to it the following way.
If you don't have the module requests installed you can install it with pip install requests
Custom headers
We might receive a 403 error if we don't include a user-agent. Or we might want to send a specific header. We can do that the following way.
import requests
headers = {
"Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8",
"Accept-Encoding": "gzip, deflate, sdch",
"Accept-Language": "en-US,en;q=0.8,es;q=0.6,sv;q=0.4",
"Cache-Control": "max-age=0",
"Connection": "keep-alive",
"Cookie": "_gauges_unique_hour=1; _gauges_unique_day=1; _gauges_unique_month=1; _gauges_unique_year=1; _gauges_unique=1",
"Host": "docs.python-requests.org",
"If-Modified-Since": "Wed, 03 Aug 2016 20:05:34 GMT",
"If-None-Match": 'W/"57a24e8e-e1f3"',
"Referer": "https://www.google.com/",
"Upgrade-Insecure-Requests": "1",
"User-Agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.82 Safari/537.36"
}
req = requests.get("http://site.com", headers=headers)
print req.status_code
print req.text
If you need to add an action, like loggin in or something like that, to your request you do the following:
values = {'action' : 'whatever'}
req = requests.get("http://site.com", data=values, headers=headers)
Here is the documentation http://docs.python-requests.org/en/master/user/quickstart/
Read and write to files
Many times we want to read through files and do stuff do it. This can of course be done using bash but we can also do it in python. It might be easier to parse text in python.
Basic banner-grabber
Here is an example of the most basic usage of the socket module. It connects to a port and prints out the response.
#!/user/bin/env python
# Importing the socket module
import socket
# We use the socker() method of the module socket and store it in the variable s.
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
# Here we use the connect method of the socket we created. The two arguments are pretty self-explanatory
# The first is the adress the second is the port.
s.connect(("192.168.1.104", 22))
# Here we save what the socket reviewed in the variable answer.
answer = s.recv(1024)
print answer
# Send stuff. REMEMBER THE \r\n
s.send("this is my message\r\n")
print s.recv(1024)
# Here we close the socket.
s.close
If you need to check all 65535 ports this might take some time. If a packet is sent and recieved that makes it 65535 seconds, it translates into about 18 hours. So to solve that we can run the a function in new threads.
from multiprocessing.dummy import Pool as ThreadPool
pool = ThreadPool(300)
results = pool.map(function, array)
Read more about parallellism here: http://chriskiehl.com/article/parallelism-in-one-line/
Connecting to SMTP
A crappy script to connect to a smtp-server and if you are allowed to test for users with VRFY it goes ahead and test for the users that you input from a file. One very important thing to note here, that had me stuck for quite a while is that you need to send the query strings in raw-format
The \r here is fundamental!!
#!/usr/bin/python
import socket
import sys
import time
import re
ips = [
"192.168.1.22",
"192.168.1.72"
]
users = ["username"]
userfile = open("/fileWithUsernames.txt", "r")
for line in userfile:
user = line.strip("\n")
users.append(user)
for ip in ips:
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((ip, 25))
banner = s.recv(1024)
print "****************************"
print "Report for " + ip
print banner
s.send('VRFY root \r\n')
answerUsername = s.recv(1024)
answerAsArray = answerUsername.split(" ")
if answerAsArray[0] == "502":
print "VRFY failed"
if answerAsArray[0] == "250":
print "VRFY command succeeded.\nProceeding to test usernames"
for username in users:
time.sleep(5)
s.send("VRFY " + username + "\r\n")
answerUsername = s.recv(1024)
answerUsernameArray = answerUsername.split(" ")
print answerUsernameArray[0]
if answerUsernameArray[0] == "250":
print "Exists: " + username.strip("\n")
else :
print "Does NOT exist: " + username.strip("\n")
if answerAsArray[0] == "252":
print "FAILED - Cannot verify user"
else:
"Some other error or whatever here it is: \n" + answerUsername
s.close()
Client/Server using sockets
http://programmers.stackexchange.com/questions/171734/difference-between-a-socket-and-a-port