High-level dynamic language developed by Guido van Rossum, particularly popular for server-side web programming and scripting.

learn more… | top users | synonyms

0
votes
3answers
72 views

OSCP (Offensive Security's PWK) Requirements [duplicate]

I wanted to ask a few questions, mainly referred to those who completed OSCP or who know about it. I want to take the course, I know that understanding of TCP/IP, IP subnetting and addressing and ...
0
votes
0answers
6 views

Python windows reverse shell one liner [migrated]

can anyone help me on a python reverse shell one liner for Windows ( has to be windows oneliner) I am tring to modify the one for linux which i have used many times but this is my first time for ...
2
votes
0answers
85 views

Any vulnerability in .net implementation for C# object.GetHashCode?

I've already asked this question on SO, but I think that this forum is more appropriate to discuss security issues. My point is that most OO languages has a way to get a unique hash code for an ...
1
vote
0answers
55 views

Help - Web-form Bruteforcing with Python [migrated]

So, I have this Python script below. What it does, is it basically bruteforces a web-form (login) using itertools. It does what I want, I've got it to work perfectly etc., however I'd like to ask if ...
5
votes
2answers
63 views

Can you block command line prompt but allow Python?

I want to block users for using the command prompt, but I also want to allow them to use Python. However, Python has the os module which users can use to execute commands, like: >>> import ...
0
votes
0answers
27 views

Redirecting STDIN and STDOUT to vulnerable program

I have been working on my exploit development skills, and have come to a problem. I am trying to take advantage of an information leak in a linux binary to bypass ASLR. The leak is a function pointer ...
1
vote
1answer
39 views

Write to selected disk location to overwrite deleted file

I know that every file on a computer is written to a specific disk location. Using Python I want to locate the file and overwrite it in order for it to be impossible to retrieve it. Using an SSD I ...
1
vote
2answers
88 views

Does this method of password confirmation risk encrypted file integrity?

I'm trying to make a basic encryption/decryption script for personal use, and it works perfectly fine. I'm posting this in the infosec section because my question revolves around how easy it is to ...
-6
votes
1answer
55 views

Where is the CSRF vulnerability in this Python CGI application? [closed]

I have the following Python code, and I am wondering which line is most likely to expose a CSRF vulnerability. import cgi import Cookie c = Cookie.SimpleCookie() form = cgi.FieldStorage() email = ...
43
votes
1answer
5k views

I have the ability to run arbitrary Python code on the 'apache' user. What damage can I do?

So, due to bad programming on the part of one of my former colleagues, one of our internal web apps allows the user to upload and run an arbitrary Python file. This recently came to light via an ...
0
votes
0answers
22 views

PyOpenSSL - where are all the encryption functions? [migrated]

In answering this question, I'm looking at the docs for PyOpenSSL - a python wrapper for OpenSSL. It's got signatures and certificate stuff, but where's all the encryption stuff? Am I missing ...
1
vote
0answers
32 views

Scapy problem in sending packet

I am trying to use Scapy for testing the network. Whenever I send a packet with commands like send, sr ,sr1 I get this message: python.exe has stopped working I am using Scapy 2.2.0 on Windows ...
0
votes
0answers
38 views

Tool/Python script to generate word list [duplicate]

Is there a tool or specific Python script to performs the following to generate a word list: able to set minimum amount of letters such as 8 able to set maximum amount of letters such as 15 use ...
0
votes
2answers
108 views

Website doesn't provide cookie (csrf token) when connecting over proxy. Why/how?

The Python code below should grab a "csrf token" cookie from Instagram.com, but I get an error message when running the program through any sort of https or socks5 proxy, informing me that the "csrf" ...
1
vote
1answer
51 views

Functions in common server-side languages which are used to execute code [closed]

I want to know the list of functions which are used to evaluate strings to code. For example: in PHP we have the eval function which evaluates a string to PHP code. Input passed into eval without ...
1
vote
1answer
103 views

How to handle password storage for my project?

We have NFC cards to keep track of presence, students scan their card to a terminal at the beginning of every lesson, we want to extend the cards usage to filter out who can access the Raspberry Pi's ...
0
votes
0answers
40 views

idevicerestore installation trouble

Can anyone help me figure out what im doing wrong to install this software? ``` root@kali:~/libimobiledevice# sudo apt-get install libusbmuxd-dev libplist-dev libplist++ Reading package lists... Done ...
3
votes
1answer
77 views

What are some vulnerabilities of environment variables (on any platform)?

I am writing a small cross platform Python application (a package manager to be used internally by my corp), and I'm thinking of using something similar to this answer on Stack Overflow to check for ...
1
vote
2answers
77 views

Safe way to store credentials for an application

I want to use an API for one of the projects on which I am working. What's the good practice/way to store the credentials required for the API? For example, I don't want to later push the project into ...
0
votes
1answer
58 views

Verifying that a request is internal

I've got a web app that will only output safe code. It needs to pass this to a Python backend. The logical way to pass things between JavaScript and Python is to have a Flask server running. Then, the ...
1
vote
0answers
162 views

MQTT (Mosquitto) certificate SSL23_GET_CLIENT_HELLO:unknown protocol [closed]

I'm been desperately trying to get my MQTT clients to connect to my MQTT broker which is set up with a certificate from a CA. To be able to get the CA certificate, I've used the letsencrypt python ...
0
votes
0answers
36 views

What is a straightforward way to brute force CLI applications?

This is a question to maybe more CTF-experienced guys among you. I wonder how you generally brute force a simple CLI application. For example if you have an application which tells you a user's data ...
-1
votes
1answer
44 views

How can someone execute arbitrary code on Python's built in server module? [closed]

I'm not sure if this question could be consider inappropriate here. $ python -m http.server The source code tells: # https://hg.python.org/cpython/file/3.5/Lib/http/server.py#l21 SECURITY WARNING:...
1
vote
1answer
112 views

Protect against client-initiated renegotiation DoS in OpenSSL/Python

According to https://blog.qualys.com/ssllabs/2011/10/31/tls-renegotiation-and-denial-of-service-attacks, servers supporting SSL/TLS connections and allowing client-initiated renegotiations are ...
3
votes
1answer
71 views

OS fingerprinting [closed]

I have been asked to write a small tool that detects the running OS on a victim device. The tool should be able to fingerprint Linux versus Android versus iOS. Extra credit for version info. It needs ...
3
votes
1answer
45 views

Are there any risks to matching user-supplied regex against user-supplied inputs?

I have an IRC bot written in python3 that parses user requests for search and replace. Is there any risk of DoS or other attack by doing this?
-3
votes
1answer
62 views

How long would this take to hack [closed]

Messing around in python3 and i am wondering how safe/ how long would this take to hack/crack? code Here output when password is "admin" and hash amount is 100 Paste bin
3
votes
1answer
85 views

Sending a token with a request from one app to another

Say I have an application written in some language and framework (Python + flask, for instance), and have a great deal of the functionality requiring login, and authentication via JWT. Now I want to ...
1
vote
1answer
417 views

Python Requests SSL Verification

I'm currently messing around with the Requests module in python, which allows you to specify a SSL cert to use in your request, using the following command url = r'https://www.google.com' cert_path = ...
4
votes
1answer
113 views

How do I use a directory of YARA files?

I'm going through the Malware Cookbook PEScanner and they want a path to my YARA files to search on. I currently have a directory full of YARA rules for known pieces of malware. What would be the ...
0
votes
0answers
102 views

iSniff-GPS: Certificate Verification

iSniff-GPS I came across an interesting sounding project on GitHub, called iSniff-GPS. I decided to check it out, but i experienced some issues when trying to use the web interface. Instructions ...
4
votes
1answer
87 views

Unable to get correct base for cracking Crypt3 SHA-512 on Linux with Python

I am reading a book and it gives me a simple Python script to crack /etc/shadow passwords that were encrypted with the crypt() function. It then challenges you to amend the Python program to work with ...
4
votes
1answer
98 views

How should I start security testing of python standalone application?

I'm looking for an answer specific to Windows/Linux standalone applications, for instance Dropbox has Windows Application written purely (I think so) in python, What steps should I follow? What are ...
1
vote
2answers
112 views

How to encrypt data in email body sent by (offline) app and decrypt on server

I've build an (offline)app (HTML/JS). The app allows the user to write a report (event when he is offline). The data from the report is sent via the body of an email to the companies special email ...
0
votes
2answers
34 views

What is the security measure that prevents me from posting using script and I must use browser to execute HTTP POSTs successfully [closed]

I'm using python to log into kijiji.ca with cookies enabled. The login is successful and passes (verified). I then use python to post an ad, however the ad posting keeps failing and redirects me to ...
3
votes
1answer
96 views

Is recursively encrypting files inside containers of increasingly stronger or equivalent algorithm encryption worth it?

I'm wondering if inserting a container within a container based approach like a recursive TrueCrypt or VeraCrypt container would provide a more secure protection against brute force attacks, I/O ...
3
votes
1answer
3k views

Why does the tool 'codesign' in OS X 10.11 (El Capitan) report every Python process as “code object is not signed at all”?

If you start any Python process on OS X 10.11 (10.11.0 or 10.11.1) El Capitan, and run the OS built-in tool 'codesign' to verify the process, you will receive an error saying "code object is not ...
1
vote
0answers
249 views

Converting Metasploit module to standalone Python script [closed]

How easy is to convert Ruby code to Python code and to change Metasploit module into standalone Python script for Linux?
0
votes
0answers
148 views

Any recent IOS Monitor Mode Projects?

There was a project back for IOS 5 that created a sudo-moniter mode using tcpdump, python, and libpcap. It does require a jailbreak. It is located here: Ios Monitor Mode Are there any projects for ...
1
vote
2answers
425 views

Is this sanitizer vulnerable to XSS?

To have a simple and secure editor for text fields of a django app, I have this snippet to sanitize input html into django code: from bs4 import BeautifulSoup def sanitize_html(value): ...
3
votes
2answers
139 views

Securely saving credentials for later plain-text authentication

I am developing a Django application where a user logs in with Kerberos, and then has accesses to a number of internal applications. One of these is a file application that connects to a server over ...
1
vote
1answer
289 views

Brute force attack [closed]

I'm trying to make a simple script (brute force attack) on Joomla to try if it works. #! /usr/bin/python import re #regex import urllib import urllib2 x = urllib2.urlopen("http://www.demosite.center/...
3
votes
1answer
52 views

Question about email app in Python and security

I've managed to get my tiny little app to send an email with a click of a button using this code (this is just the email part): http://pastebin.com/nR5g28ct But to avoid some error, I had to allow ...
0
votes
0answers
41 views

Using UUIDs for non-guessable URLs [duplicate]

How safe is using UUIDs as URL identifier for non-guessable IDs? Specifically UUIDs generated by Python's uuid4() function, using base64 encoding. E.g. https://example.com/content/...
6
votes
1answer
345 views

What are the pros and cons of using sha256 to hash a password before passing it to bcrypt?

My apologies if this has already been asked. I recently became aware of the fact that bcrypt truncates passwords to 72 characters. Practically speaking my intuition is that this does not pose any ...
1
vote
2answers
176 views

Security concerns with user Python scripts

I am generating dynamic images in a web service. The current setup is: Request image.py image.py does a database lookup to determine what data to use to generate the image image.py calls a sub-...
0
votes
1answer
88 views

Can I tell if a python script is secure from transmitting sensitive data by analyzing its imports?

A thought experiment My goal is to know whether, and how, a 3rd party python script that may be entrusted with sensitive information, can be trusted on a fundamental level. Basically this question ...
-4
votes
1answer
152 views

Is there an exploit for python hash collision? [closed]

Is there an exploit for this vulnerability? EDIT Python DoS via hash algorithm collision - oCERT advisory 2011-003. Affected numerous languages. No CVE for Python but CVEs for other languages.