https://github.com/SafeBreach-Labs/pyekaboo

Proof-of-concept program that is able to to hijack/hook/proxy Python module(s) thanks to $PYTHONPATH variable
https://github.com/SafeBreach-Labs/pyekaboo

Last synced: 10 days ago
JSON representation

Proof-of-concept program that is able to to hijack/hook/proxy Python module(s) thanks to $PYTHONPATH variable

• Host: GitHub
• URL: https://github.com/SafeBreach-Labs/pyekaboo
• Owner: SafeBreach-Labs
• License: bsd-3-clause
• Created: 2017-05-04T23:45:05.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2017-05-04T23:47:49.000Z (over 7 years ago)
• Last Synced: 2024-08-03T17:12:14.321Z (3 months ago)
• Language: Python
• Homepage:
• Size: 13.7 KB
• Stars: 150
• Watchers: 10
• Forks: 29
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-hacking-lists - SafeBreach-Labs/pyekaboo - Proof-of-concept program that is able to to hijack/hook/proxy Python module(s) thanks to $PYTHONPATH variable (Python)

README

        
# Pyekaboo

Pyekaboo is a proof-of-concept program that is able to to hijack/hook/proxy Python module(s) thanks to $PYTHONPATH variable. It's like "DLL Search Order Hijacking" for Python.

It was released as part of the [Backdooring Your Python Programs](http://thotcon.org/schedule.html) talk given at THOTCON 0x8 conference by Itzik Kotler from [SafeBreach Labs](http://www.safebreach.com).

Slides are availble [here](http://www.ikotler.org/InYourPythonPath.pdf)

### Version

0.1.0

### Installation

Pyekaboo requires [Python](https://python.org/) and was tested with Python 2.7.10.

```sh

$ git clone https://github.com/SafeBreach-Labs/pyekaboo.git

$ cd pyekaboo

$ cd pyekaboo

$ python mkpyekaboo.py -h

```

### Example: Debugging Python's sockets Module

```sh

# assume pyekaboo root directory

$ cd scripts

$ python ../pyekaboo/mkpyekaboo.py -l 6 socket

$ ./enable_pyekaboo.sh -i

$ python ../test_apps/django_test/blog/manage.py runserver

```

License

----

BSD 3-Clause

###