Juanjo Salvador JuanjoSalvador

HOW-TO: Python code injection

A really, REALLY SIMPLE example of how we can inject malicius code into a Python script. For learning and documentation purposes.

This is an unoffuscated version of our malicious code (actually dummy and completely safe).

import datetime 
print(int(datetime.datetime.now().timestamp() * 100000))

Copy init.vim into your vim/neovim config (~/.vimrc or ~/.config/nvim/init.vim).
Run :PlugInstall command.
Reload.

I hereby claim:

I am JuanjoSalvador on github.
I am jsalvador (https://keybase.io/jsalvador) on keybase.
I have a public key whose fingerprint is 8650 335F 9B32 25FC 2E18 5395 71EC 2F5C B6EB CF5A

To claim this, I am signing this object:

	#panel {
	background-gradient-direction: none;
	background-color: #1d2128;
	border-radius: 7px;
	margin-top: 3px;
	margin-bottom: 3px;
	margin-left: 10px;
	margin-right: 10px;
	height: 35px;

	FROM alpine:latest
	MAINTAINER Juanjo Salvador "[email protected]"

	RUN apk add python3
	COPY ./app.py /app/app.py

	ENTRYPOINT ["python3", "/app/app.py"]

	import tweepy
	import csv

	from datetime import date, timedelta, datetime

	CONSUMER_KEY = ''
	CONSUMER_SECRET = ''
	ACCESS_TOKEN = ''
	ACCESS_TOKEN_SECRET = ''

	#!/bin/bash

	systemd-cgtop \| grep mastodon* \| awk 'BEGIN { printf "%-28s %s", "SERVICE", "MEMORY USAGE\n";
	printf "%-28s %s", "-------", "------------\n" }

	{ printf "%-30s %10s\n", substr($1, 15), $4 }'

	#%{$fg_bold[green]%}%n@%m %{$reset_color%}

	PROMPT=$'%{$fg[blue]%}[%~]%{$reset_color%} $(git_prompt_info) %{$fg_bold[red]%}→%{$reset_color%} '

	ZSH_THEME_GIT_PROMPT_PREFIX="%{$fg[green]%}["
	ZSH_THEME_GIT_PROMPT_SUFFIX="]%{$reset_color%}"
	ZSH_THEME_GIT_PROMPT_DIRTY=" %{$fg[red]%}*%{$fg[green]%}"
	ZSH_THEME_GIT_PROMPT_CLEAN=""

	[DEFAULT]
	API_KEY = SET YOUR BOT API KEY HERE
	CHANNEL_NAME = SET YOUR @channelname HERE

	#!/bin/bash

	VERSIONS="buster\|bullseye\|bookworm"
	BRANCHES="stable\|devel\|staging"

	if [ "${UID}" -eq 0 ] ; then

	ARCH=$(dpkg --print-architecture)

	if [ "${ARCH}" == "amd64" ] ; then