PROBABLY_PENTEST (1) package from Python Package Index.
- Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.
ctf-aio-tool¶
- Metadata(1) Check in pypi-data project
- Affected versions(2) unspecified
- May not be available. See more in pypi-json-data repository.
- Version numbers are currently not tracked. Assume all versions are affected.
Campaign data¶
Campaign information may not always be 100% accurate for every related package.
Campaign description
Installing the package starts a reverse shell. The remote server is, however, set as a local IP, so it's most probably testing
See more details on the campaign page.
obfuscation
Campaign targets obfuscation.
override_install
The package overrides the install command in setup.py to execute malicious code during installation.
revshell
The package contains code to create a reverse shell, allowing an attacker to execute any commands on the victim's machine.