> For the complete documentation index, see [llms.txt](https://zweilosec.gitbook.io/python-pearls/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://zweilosec.gitbook.io/python-pearls/master.md).

# Python for Pentesters

A collection of python scripts collected from various sources to help in penetration testing and Red Teams. Examples can be found in their relevant Github accounts.

## Python for Pentesters

### Overview #\#

Getting started with Python for pentesting and red team engagements is fairly easy! This repo is just a small collection of random scripts from various sources.

This code is provided purely for educational purposes. All responsibility for any potential damage or unethical/illegal behavior is solely on the user.

## My scripts

* bludit-3.9.2\_pwd-bruteforce\_multi.py: Multithreaded password brute-force tool to get valid password for exploiting CVE-2019-17240

## Scripts from other sources

**Many scripts written by: Mike Felch (@ustayready) and Joff Thyer (@joff\_thyer) of:**

![Black Hills Information Security](https://www.blackhillsinfosec.com/wp-content/uploads/2016/03/BHIS-logo-L-300x300.png)

* pivot\_winrm.py: shows how to use Python with winrm to execute commands on a remote machine
* cloud\_aws\_s3.py: search AWS S3 buckets for sensitive filenames
* cloud\_aws\_secrets.py: Dump all the secrets in AWS Secrets Manager
* cloud\_azure\_ad.py: Dumping AzureAD users
* cloud\_gsuite\_backdoor.py: Backdooring G Suite accounts for full access
* cloud\_gsuite\_email.py: Reading GMail emails
* crack\_jwt.py: Cracking JSON web tokens
* live\_host\_discovery.py: Discovering live hosts on a network
* live\_port\_discovery.py: Discovering open ports on a host
* passwords\_attack.py: Trying username/password combinations on a web authentication portal
* pivot\_psremoting.py: Pivoting in a Windows environment using PSRemoting
* pivot\_wmi.py: Pivoting in a Windows environment using WMI
* shodan\_search.py: Searching for internet connected devices on Shodan
* socket\_c2\_client.py: C2 socket client
* socket\_c2\_server.py: C2 socket server
* web\_brute.py: Brute forcing web paths for unknown attack surfaces
* web\_robots.py: Downloading the robots.txt for URLs
* web\_sniff.py: Sniffing HTTP packets
* web\_spa.py: Interacting with a single page app with a headless browser then copying session cookies to the requests library
* pymeta.py: Read all files in a directory recursively and extracts metadata from any office documents, and PDFs discovered
* powerstrip.py: Strips comments out of a PowerShell script, and writes a file with -stripped as part of the filename
* pyinjector.py: Using ctypes to execute shellcode within the same process or inject into a remote process using thread manipulation