• Architecture

• Purpose

• Results

• Cyber attacks

• Reconnaissance with Python Nmap (3)
  
• What does an attack target see?
• Socket
• Dictionary Attack
• Gas Attack
• Packet Trace and Form Update, time permitting
  

• Lessons learned

dagmbp:Pen Test Project Scripts daveg$ sudo python3 nmapscanner-4.py
Host:  10.3.129.84
State:  up
Protocol:  tcp
Port:  514 State:  open

dagmbp:Pen Test Project Scripts daveg$ sudo python3 nmapscanner-4.py
Host:  192.168.0.19
State:  up
Protocol:  tcp
Port:  21 State:  open              (FTP)
Port:  22 State:  open              (SSH)
Port:  80 State:  open              (HTTP)
Port:  139 State:  open            (Net BIOS)
Port:  445 State:  open            (MS Active Directory)

{'Content-Type': 'text/html; charset=UTF-8', 'Server': 'Microsoft-IIS/10.0', 'X-Powered-By': 'PHP/8.0.9', 'Date': 'Sun, 10 Dec 2023 16:52:02 GMT', 'Content-Length': '61738'}

Note this is a dictionary

Location: 37.3541,-121.9552
Region: California
City: Santa Clara
Country: US

{'Date': 'Sun, 10 Dec 2023 16:52:12 GMT', 'Expires': '-1', 'Cache-Control': 'private, max-age=0', 'Content-Type': 'text/html; charset=ISO-8859-1', 'Content-Security-Policy-Report-Only': "object-src 'none';base-uri 'self';script-src 'nonce-PA_yz9Mg2Do8ZMeL6Z8Y2g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp", 'P3P': 'CP="This is not a P3P policy! See g.co/p3phelp for more info."', 'Content-Encoding': 'gzip', 'Server': 'gws', 'X-XSS-Protection': '0', 'X-Frame-Options': 'SAMEORIGIN', 'Set-Cookie': '1P_JAR=2023-12-10-16; expires=Tue, 09-Jan-2024 16:52:12 GMT; path=/; domain=.google.com; Secure, AEC=Ackid1RAO3l9_aSj3w7vzeGMreG1Vd1f5x1IjoMoDiNozKIKXXwLREZuCw; expires=Fri, 07-Jun-2024 16:52:12 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax, NID=511=Sp8o-EFWUWtvasEMVZaE70KJcfJBDOuLYW3aDqQ0Adu2tjIv3IC1hcTI2EzlMHg7Prk4UxgeR_LM2WzOg3XTKPpAeO2kBGiWqDczPDXFqt-Q0cWPZFL3BnEEuNvsiAnqu9EtZA7ndeW9L9QQ2G7amitatLw4LwPotymbENF2Rck; expires=Mon, 10-Jun-2024 16:52:12 GMT; path=/; domain=.google.com; HttpOnly', 'Alt-Svc': 'h3=":443"; ma=2592000,h3-29=":443"; ma=2592000', 'Transfer-Encoding': 'chunked'}

Location: 37.3394,-121.8950
Region: California
City: San Jose
Country: US

import paramiko
import os
import threading

def task4():
    triggerTheFiles("10.15.44.174","student","student")
def task3():
    triggerTheFiles("10.15.45.200","student","student")
def task2():
    triggerTheFiles("10.15.44.141","user","temp")
def task1():
    triggerTheFiles("10.15.45.217","student","student")

# Create object of SSHClient and connect to SSH
def triggerTheFiles(ipAddress, userName, passWord):
    ssh = paramiko.SSHClient()
    ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
    ssh.load_host_keys(os.path.expanduser('~/.ssh/known_hosts'))
    ssh.connect(ipAddress, username=userName, password=passWord)
    print("ip, user, and pw are.....:", ipAddress, userName, passWord)
    ssh_stdin, ssh_stdout, \
    ssh_stderr = ssh.exec_command("chmod 755 playTheFiles.sh")
    ssh_stdin, ssh_stdout, \
    ssh_stderr = ssh.exec_command("nohup sh playTheFiles.sh &")
    exit_code = ssh_stdout.channel.recv_exit_status() # handles async exit error
    for line in ssh_stdout:
        print(line.strip())

thread1 = threading.Thread(target=task1)
thread2 = threading.Thread(target=task2)
thread3 = threading.Thread(target=task3)
thread4 = threading.Thread(target=task4)

thread1.start()
thread2.start()
thread3.start()
thread4.start()

thread1.join()
thread2.join()
thread3.join()
thread4.join()

print(" ")
print("# ------------------------------------------------------#")
print("# Read excel file with laptop ID and serial number.     #")
print("# Read a template PDF. Update the laptop ID and serial  #")
print("# number on the template PDF and write it out as file   #")
print("#                                 -Dave G. October 2023 #")
print("# There is a read-me file for this script. It would be  #")
print("# a good idea to read it before running this.           #")
print("#-------------------------------------------------------#")
print(" ")
import openpyxl
from pypdf import PdfReader, PdfWriter

inPutFile     = input("Please enter the Excel spreadsheet name....: ")
if inPutFile == '':
    inPutFile = 'NewLaptopInventory.xlsx'
    print("No file name furnished. Using default (NewLaptopInventory.xlsx)")
# Open the xlsx file with laptop ID and serial number
dataframe = openpyxl.load_workbook(inPutFile)
 
# Define variable to read sheet
dataframe1 = dataframe.active
 
# This is the template PDF used to make the updated forms
reader = PdfReader("inputFormTemplate.pdf")
writer = PdfWriter()
page = reader.pages[0]
fields = reader.get_fields()
writer.add_page(page)
fileCounter=0

# Iterate through rows and columns of the spreadsheet
for row in range(1, dataframe1.max_row):
    columnCounter=0
    for col in dataframe1.iter_cols(0,dataframe1.max_column-2):
        testData=(col[row].value)
        if columnCounter==0:
            laptopNumber=testData
        if columnCounter==1:
            serialNumber=testData
        columnCounter+=1       

    outFileName=(laptopNumber+".pdf")
    # print(outFileName, laptopNumber, serialNumber) # diagnostic print

    writer.update_page_form_field_values(
        writer.pages[0], {"Text1": laptopNumber,
        "Asset\040SerialTag\040Row1": "\n"+serialNumber})

    # write "output"
    with open(outFileName, "wb") as output_stream:
        writer.write(output_stream)
        fileCounter+=1

print(" ")
print("# ------------------------------------------------------#")
print("# Process finished                                      #")
print("#", fileCounter, "PDF files were created                            #")
print("# Please inspect the PDFs and verify                    #")
print("# ------------------------------------------------------#")
print("\n\n")

• Used what we learned in class about reading files, parsing delimited lists and strings, UTF<->Unicode conversion, dictionaries, multi-threading, sockets, hashing, and more:
  
• Create PDF documents and forms using Python
  
• ssh login, secure copy, and shell commands on a remote host from a python script
• 'random' isn't so random
  

• Virtual Box
• BASH shell scripting
• Setting up Apache, SMB, and FTP servers
• Network administration, Configuring local area networks with static IP clients
• Security on a Mac
• Linux, MacOS, and Windows
  

• Sometimes Python is not the best solution.
• Python NMAP library is feature rich. NMAP is better
• Python packet capture is good. TCPDump and Wireshark are better