Comments (12)
Haven't "got the time" to convert it yet. Maybe I'll have a look tomorrow. Initially I think I went for backwards capability, but I think almost everyone have py3 now... so probably not a good argument :)
from mando.me.
So I begun the conversion from py2 to py3, but doing so I found an error or security feature preventing the "echo -ne" from working. So I have started to change this method to first echoing 0x00,0x01... to the server and then loop 0-255 converting each hex to ascii using sed. This seems to work, and I would perhaps have a new version ready in a few minutes or an hour using this method and py3.
from mando.me.
Ill fire it up and test it now +1
from mando.me.
Well from a quick check, you can likely just 2to3 the code, sort out the few issues with change to syntax for the 'Expected type Dict got List:Dict instead" it should be ready to go. Nice projects btw nice to see people being innovative.
from mando.me.
Quick update:
I found some strange errors in the embedded PHP-code that took me forever to identify (due to it being encrypted). I think they are related to a newer version of PHP (in regards to HTTP-variables not allowed to contain '_') which is different then the one in metasploitable that I have been testing on before. So I haven't completed the py2->py3 yet due to this obstacle, but hopefully tomorrow!
from mando.me.
So I have ported the code to python3. I had to do a lot of changes to get it running, and then some more to get the external payloads to execute correctly. I have tested meterpreter and reverse shell spawning (it works, though I had to change rev-shell to 'bash' instead of 'sh'). I currently don't have my lab environment up and running so I haven't been able to test everything as my own environment don't allow a lot of the exploits (pew).
from mando.me.
OK well good and bad news, Good news is its "Mostly" working the bad news is theres still a few minor errors, if you want I can Pastebin the souce code with ##+Error## for you... its mostly little things like: Unresolved Attribute reference for Class Linux/Windows, Unresolved attribute for self.socket for class shell
Or feel free to pop into the IRC Blackarch channel and I can just talk you through it.
from mando.me.
Drop a pastebin, I have some errands to run. Maybe I see you at the IRC later.
from mando.me.
https://pastebin.com/pZuRz7rp
Ive added #+Error# To every line/section with errors, after a quick check with Pycharm turns out you have more than a few errors, with 3 maybe 4 critical ones. Anyhows Ill see you at the IRC Channel and talk you through it then... its all trials and tribulations I had to go through myself back in the day 👍
from mando.me.
Nice, I'll have a look later. Pycharm seems to do a good job at finding errors.
from mando.me.
Yeh really you should be using it, itll save you a TON of time and its exceptional for debugging scripts, even more so when you start playing around with Async code ;o
from mando.me.
I only use nano in one terminal and run the script in one terminal... so yeah Pycharm might help me a bit XD
from mando.me.
Related Issues (2)
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from mando.me.