Skip to content

Latest commit

 

History

History
38 lines (26 loc) · 982 Bytes

README.md

File metadata and controls

38 lines (26 loc) · 982 Bytes
Raw

Pyekaboo

Pyekaboo is a proof-of-concept program that is able to to hijack/hook/proxy Python module(s) thanks to $PYTHONPATH variable. It's like "DLL Search Order Hijacking" for Python.

It was released as part of the Backdooring Your Python Programs talk given at THOTCON 0x8 conference by Itzik Kotler from SafeBreach Labs.

Slides are availble here

Version

0.1.0

Installation

Pyekaboo requires Python and was tested with Python 2.7.10.

$ git clone https://github.com/SafeBreach-Labs/pyekaboo.git
$ cd pyekaboo
$ cd pyekaboo
$ python mkpyekaboo.py -h

Example: Debugging Python's sockets Module

# assume pyekaboo root directory
$ cd scripts
$ python ../pyekaboo/mkpyekaboo.py -l 6 socket
$ ./enable_pyekaboo.sh -i
$ python ../test_apps/django_test/blog/manage.py runserver

License

BSD 3-Clause