PythonShellcodeRedux/words_encode.py at main · yoda66/PythonShellcodeRedux · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
#!/usr/bin/env python3

import argparse
import pathlib
import random

class EncodeShellcode():

    ew = []
    picked = []

    def __init__(self, wordfile, shellcode_file,
                 indent=12, outfile='', minlen=0, maxlen=99):
        self.wordfile = pathlib.Path(wordfile)
        self.indent = indent
        self.shellcode_file = pathlib.Path(shellcode_file)
        self.minlen = minlen
        self.maxlen = maxlen

        if outfile:
            self.of = open(outfile, 'wt')
        else:
            self.of = open(f'{self.shellcode_file.stem}_encoded.py', 'wt')
        self.get_words()
        self.process_shellcode()
        self.of.close()

    def pick_word(self):
        while True:
            w = random.choice(self.words)
            if w not in self.picked and self.minlen <= len(w) <= self.maxlen:
                self.picked.append(w)
                return w

    def get_words(self):
        fh = open(self.wordfile, 'rt')
        self.words = [x[:-1] for x in fh.readlines()]
        fh.close()
        while len(self.ew) < 256:
            self.ew.append(self.pick_word())

        self.of.write('dec = {')
        self.of.write(
            ','.join([f'"{x}": {i}'
            for i, x in enumerate(self.ew)]))
        self.of.write('}\n')

    def process_shellcode(self):
        fh = open(self.shellcode_file, 'rb')
        contents = fh.read()
        fh.close()
        self.of.write('sce = [')
        self.of.write((','.join([f'"{self.ew[int(x)]}"' for x in contents])))
        self.of.write(']\n')

if __name__ == '__main__':
    parser = argparse.ArgumentParser()
    parser.add_argument(
        '-w', default='wordlists/lang-english.txt',
        help='words file')
    parser.add_argument(
        '-o', default='',
        help='output filename')
    parser.add_argument(
        '-minlen', type=int, default=0,
        help='minimum word length')
    parser.add_argument(
        '-maxlen', type=int, default=99,
        help='maximum word length')
    parser.add_argument(
        'shellcode', help='shellcode binary content')
    args = parser.parse_args()
    EncodeShellcode(
        args.w, args.shellcode, outfile=args.o,
        minlen=args.minlen, maxlen=args.maxlen)