This is my side project, that exploits the permissions and vulnerabilities of pip packages, which is capable of sneaking in sensitive information, source code or any malware inside a local machine.
- Well, this basically functions like a Python package and we use certain methods that triggers the respective operations.
- It has few features that's especially for integrating source into secured environment without getting caught.
- This repository holds the codebase that has already incorporated few features, but feel free to fork and change the codebase as you see fit.
pip install matplotlib-visual
Note: This
matplotlib-visual
has already been implemented by me, you can officially install it in your PC. However this package holds information that were relevant to me and it won't be useful for new user, so I recommend you to fork and change the repository and upload your own package.
- Create a
python
file and enter any one of the codes below - Or you can open a terminal and work on python without creating a
python
this command:
python
So far, I have incorporated features that can let you get source code into machine. But sneaking in such source code can be made in some ways, they are:
- Displaying source code in console output.
from matplotlib_visual.models import display
display("<filename-without-extension>")
models method displays source code
- Stealth Copy to Clipboard, which is more secure.
from matplotlib_visual.graph import display
display("<filename-without-extension>")
graph copies the source code into system's clipboard
- Writing the source code into the program's root directory.
from matplotlib_visual.piechart import display
display("<filename-without-extension>")
- This project codebase is relatively simple and easy to contribute in terms of raw code.
- However, to implement such stealthy features or methods, doing proper research is important to begin with this project. As the previous features were implement with few lines of code but it had gone through many research and development phase.
- As it primarily, exploits the security and permissions used by pip, so keeping it with pip's standard is much advised.
- Every feature implement in this package will support major three OS
- Windows
- Linux
- MacOS
- As mentioned earlier, finding vulnerability is the primary goal, if you have found any vulnerability please raise an issue.
The primary purpose of this package is educational, aiming to highlight and improve security measures by demonstrating potential vulnerabilities in systems.
Anyone can contribute to this project, or they can fork and work on their own project. If you have any ideas to enhance this project to it's stealthy development, feel free to submit a pull request.
Remember the key is to keep it discreet!
This package operates under the GPL 3.0 , allowing you to sneakily use and modify it as needed.
Happy sneaking! 🤫