Jump to content
pr00f

Pupy - RAT with an embeded Python interpreter

Recommended Posts

Pupy is an opensource RAT (Remote Administration Tool) written in Python. Pupy uses reflective dll injection and leaves no traces on disk.


Features:

On windows, the Pupy payload is compiled as a reflective DLL and the whole python interpreter is loaded from memory. Pupy does not touch the disk
Pupy can reflectively migrate into other processes
Pupy can remotely import, from memory, pure python packages (.py, .pyc) and compiled python C extensions (.pyd). The imported python modules do not touch the disk. (.pyd mem import currently work on Windows only, .so memory import is not implemented).
modules are quite simple to write and pupy is easily extensible.
Pupy uses rpyc (https://github.com/tomerfiliba/rpyc) and a module can directly access python objects on the remote client
we can also access remote objects interactively from the pupy shell and even auto completion of remote attributes works !
communication channel currently works as a ssl reverse connection, but a bind payload will be implemented in the future
all the non interactive modules can be dispatched on multiple hosts in one command
Multi-platform (tested on windows 7, windows xp, kali linux, ubuntu)
modules can be executed as background jobs
commands and scripts running on remote hosts are interruptible
auto-completion and nice colored output
commands aliases can be defined in the config

Source: https://github.com/n1nj4sec/pupy

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...