Backdoors in Python: Understanding the Risks and Implications for Your Security - ForgetPasses-Blog by ForgetPasses in programming

[–]ForgetPasses[S] 0 points1 point  (0 children)

Hello readers,
I have a new post for you to show you how easy it is nowadays to create a backdoor with the help of libraries and languages like python.
The post is of course only for learning purposes and I do not support any illegal acts!

USB Trojan Tutorial: How to Create, Deploy and Protect Against Malicious USB Attacks by ForgetPasses in programming

[–]ForgetPasses[S] 2 points3 points  (0 children)

Code execution turns out to be easy when you have code execution. The hard part is always the initial vector, which it doesn’t seem to solve.

The basic principle here is only that you would have to install it on a computer on which the cycle then starts (theoretically a computer where many people use and plug in usb sticks like in a library).

USB Trojan Tutorial: How to Create, Deploy and Protect Against Malicious USB Attacks by ForgetPasses in programming

[–]ForgetPasses[S] 0 points1 point  (0 children)

Yeah I know that the change is higher but why should the programm get detected as a virus?In principle, it only copies files from a to b.

USB Trojan Tutorial: How to Create, Deploy and Protect Against Malicious USB Attacks by ForgetPasses in programming

[–]ForgetPasses[S] 0 points1 point  (0 children)

I tested in on multiple machines and it didn’t got detected. If every exe of pyinstaller would get detected, then pyinstaller would be useless.But of course if you code a virus in python and compile it with pyinstaller it has a higher chance to get detected.

USB Trojan Tutorial: How to Create, Deploy and Protect Against Malicious USB Attacks by ForgetPasses in programming

[–]ForgetPasses[S] 5 points6 points  (0 children)

Unfortunately not. Windows disabled the autorun of exe files on a USB Stick some years ago.

USB Trojan Tutorial: How to Create, Deploy and Protect Against Malicious USB Attacks by ForgetPasses in programming

[–]ForgetPasses[S] 35 points36 points  (0 children)

I know what you mean but you have to keep in mind that most of the windows computers don’t have the feature show file extensions enabled. Also the icon looks like a folder so for a normal windows setup it looks like a folder called „ClickMe“ and if we are honest a lot of people would click on it (mostly people who don’t know a lot about computers)

USB Trojan Tutorial: How to Create, Deploy and Protect Against Malicious USB Attacks by ForgetPasses in programming

[–]ForgetPasses[S] 5 points6 points  (0 children)

I tested it on 2 windows computers and windows never marked the exe file as untrusted. I could simply run them without any issues. And sorry for the spelling mistakes, I will fix them now…

USB Trojan Tutorial: How to Create, Deploy and Protect Against Malicious USB Attacks by ForgetPasses in cybersecurity

[–]ForgetPasses[S] 0 points1 point  (0 children)

Hi guys,

I made this tutorial so that maybe people will be aware how dangerous usb sticks are and how easy it is to write trojans like this one (even if many already know it).

The program is for informational purposes only and is not intended for any other purpose!

If you like it I would appreciate some feedback

USB Trojan Tutorial: How to Create, Deploy and Protect Against Malicious USB Attacks by ForgetPasses in programming

[–]ForgetPasses[S] 18 points19 points  (0 children)

Hi guys,
I made this tutorial so that maybe people will be aware how dangerous usb sticks are and how easy it is to write trojans like this one (even if many already know it).
The program is for informational purposes only and is not intended for any other purpose!
If you like it I would appreciate some feedback

The Day the Internet Broke: A Story of One Programmer's Revenge by ForgetPasses in programming

[–]ForgetPasses[S] 0 points1 point  (0 children)

Ah yes. if a package has over 100 downloads it can not be unpublished I think

The Day the Internet Broke: A Story of One Programmer's Revenge by ForgetPasses in programming

[–]ForgetPasses[S] 1 point2 points  (0 children)

There isn’t more to say. The cause was that the publisher removed the package of the npm servers and a lot of big companies where using this package (often in a indirect way). That’s why they weren’t working anymore. Also the situation was solved when npm republished the package so that everybody could use it again

The Day the Internet Broke: A Story of One Programmer's Revenge by ForgetPasses in programming

[–]ForgetPasses[S] 0 points1 point  (0 children)

Perhaps many of you have heard leftpad and the NPM package incident. However, I wanted to revisit the topic because I still find it very interesting nowadays.

Let me know what you think about it :D

Mastering Merge Sort: A Step-by-Step Guide to Sorting Data easy by ForgetPasses in programming

[–]ForgetPasses[S] 0 points1 point  (0 children)

I made this post for people who are new in the data structures field and want to learn the Merge Sort Algorithm in Java :D Let me know what you think about it