/nathair

Security related programs written in Python

Primary LanguagePythonMIT LicenseMIT

GitHub Maintenance Code Style Black GitHub Pipenv locked Python version Python Build with poetry Python Build with pipenv Python Build with pip flake8 lint

Nathair

Selection of various scripts inspired by TJ O'Connor's Violent Python by Syngress. The scripts tend to be targeted at specific security related needs, including:

  1. Encrypted zip file dictionary cracker. Do not use this IRL, use Hashcat.
  2. Rudimentary port scanner. Do not use this IRL, use Nmap.
  3. Offline Linux password cracker (dictionary based, only supports MD5 currently). Do not use this IRL, go over to Hashcat.
  4. SSH client/server botnet (WIP - requires rewrite to leverage paramiko)
  5. Whois DB client (Requires whoisxml API key). Use the whois command baked into Linux or Mac OS.
  6. MD5 hash generator for VirusShare.com malware corpus (Scrapes public hash URLs). Use VirusTotal.

Getting Started

Please don't use this repo for anything legitimate. You're free to copy the code, clone it, and modify it (see license).

Prerequisites

  • Minimum required versions: 3.7
  • Pinned Pipenv version: 3.9
  • Incompatible versions: <3.7
  • git
  • pip or pipenv or poetry

Using/Installing

⚠ I expect much of this not to work. Use at your own peril.

Ensure you have the prerequisites. Navigate to your preferred directory.

git clone https://github.com/axi0m/nathair.git

Install via pipenv

pipenv install
pipenv run python <filename>.py

Install via poetry

poetry install
poetry run python <filename>.py

Install via pip

pip install -r requirements.txt

Help with tools

python <filname>.py -h
python <filename>.py --examples

Coding Style

Black and PEP8

Deployment

I do not recommend you use this code on a live system, this was created purely to host my code as I learned more about Python.

Built With

  • Poetry - 📦 Package management and virtual environment handling
  • Pipenv - 📦 Package management and virtual environment handling (Legacy)
  • VSCode - 🔥 IDE from Microsoft
  • LGTM - 🔐 Code quality and security scanning by LGTM/Semmle

Contributing

If you want to contribute, I recommend you fork it and do with it what you will.

Contributor Agreement

DCO



Developer Certificate of Origin
Version 1.1

Copyright (C) 2004, 2006 The Linux Foundation and its contributors.

Everyone is permitted to copy and distribute verbatim copies of this
license document, but changing it is not allowed.


Developer's Certificate of Origin 1.1

By making a contribution to this project, I certify that:

(a) The contribution was created in whole or in part by me and I
    have the right to submit it under the open source license
    indicated in the file; or

(b) The contribution is based upon previous work that, to the best
    of my knowledge, is covered under an appropriate open source
    license and I have the right under that license to submit that
    work with modifications, whether created in whole or in part
    by me, under the same open source license (unless I am
    permitted to submit under a different license), as indicated
    in the file; or

(c) The contribution was provided directly to me by some other
    person who certified (a), (b) or (c) and I have not modified
    it.

(d) I understand and agree that this project and the contribution
    are public and that a record of the contribution (including all
    personal information I submit with it, including my sign-off) is
    maintained indefinitely and may be redistributed consistent with
    this project or the open source license(s) involved.


Versioning

No specific versioning system/format defined/selected.

Author(s)

axi0m

License

This project is licensed under MIT license - see the LICENSE.md file for details.

Acknowledgements

  1. Syngress for publishing the book Violent Python.
  2. TJ O'Connor for writing the book and doing the hard work of coming up with all the examples and sharing his years of knowledge with his readers.
  3. All the projects mentioned in the Built With section. Almost all the code is other people's hardwork, I just cobbled it together.