pupy - Pupy is an opensource, cross-platform (Windows, Li

项目说明

Pupy

![Build Status]()

Simple Installation

~~If you want more detailed information Refer to the wiki~~

De Install

run pupysh from the de :

Description

Pupy is a cross-platform, multi function C2 and post-exploitation 工具 mainly written in python. It features an all-in-memory execution guideline and leaves a very low footprint. Pupy can communicate using multiple transports, migrate into processes using reflecti, and load remote python 代码, python packages and python C-extensions from memory.

Features

Windows payload can load the entire Python interpreter from memory using a reflective DLL.

- Pupy does not touch the disk.

Can be packed into a single .py file and run without any dependencies other than the python standard library on all OSes.

- PyCrypto gets replaced by pure Python AES & RSA implementations when una.

Reflectively migrate into other processes.

Remotely import pure python packages (.py, .pyc) and compiled python C extensions (.pyd, .so) from memory.

- Imported python modules do not touch the disk.

Easily extensible, modules are simple to write and are sorted by os and category.

Modules can directly access python objects on the remote 客户端 using rpyc.

Access remote objects interactively from the pupy shell and get auto-completion of remote attributes.

Communication transports are modular and stackable. Exfiltrate data using HTTP over HTTP over AES over XOR, or any combination of the a transports.

Communicate using obfsproxy pluggable transports.

Execute noninteracti on multiple hosts at once.

Commands and scripts running on remote hosts are interruptible.

Auto-completion for commands and arguments.

Custom config can be defined: command aliases, modules. automatically run at connection, etc.

Open interacti shells with auto-completion on the all-in-memory remote python interpreter.

Interacti (cmd.exe, /bin/bash, etc) can be opened remotely.

- Remote shells on Unix & Windows clients have a real tty with all keyboard signals working just like an SSH shell.

Execute PE executable remotely and from memory.

Generate payloads in formats:

| Format | Architecture | Short Name |
|---|---|---|
~~ Android Package ~~ | x86 & ARMv7 | apk
Linux Binary | x86 | lin_x86
Linux Binary | x64 | lin_x64
Linux Shared Object | x86 | so_x86
Linux Shared Object | x64 | so_x64
Windows PE Executable | x86 | exe_x86
Windows PE Executable | x64 | exe_x64
Windows DLL | x86 | dll_x86
Windows DLL | x64 | dll_x64
Python Script | x86 & x64 | py
Python Oneliner | x86 & x64 | py_oneliner
Powershell | x86 & x64 | ps1
Powershell Oneliner | x86 & x64 | ps1_oneliner

Deploy in memory from a single command line using python or powershell one-liners.

Embed "scriptlets" in generated payloads to perform some tasks "offline" without needing 网络 connectivity (ex: start keylogger, add persistence, execute custom python script, check_vm, etc.)

Multiple Target Platforms:

| Platform | Support Status |
|---|---|
Windows XP | ~~ Supported ~~ python dropped support
Windows 7 | ~~ Supported ~~ python dropped support
Windows 8 | Supported
Windows 10 | Supported
Linux | Supported
Mac OSX | Limited Support
Android | Limited Support

Documentation

All documentation can be found on the wiki.

Refer to the wiki

FAQ

> Does the server work on windows?

Pupy has not been tested on Windows. Theoretically, it should work on any platform that supports Docker and Docker Compose. However, you will need to adapt the Docker Compose installation instructions for the Windows platform.

> I can't install Pupy. The installation fails.

1. Please refer to the wiki. It is possible that your answer is there.
2. Search the Github issues and see if your issue was already solved.
3. If you issue was not solved, open a new issue following the issue guidelines.

If you do not follow these steps, you issue will be closed.

> Android and/or Mac OSX payloads and modules don't work.

Pupy has _limited_ support for Android and OSX. These platforms may not be well maintained and may break intermittently. Some modules (i.e. keylogger) may be missing for these platforms.

De

If some of you want to participate to pupy de, don't hesitate! All help is greatly appreciated and all pull requests will be re.

Also there is small note about de. Please run flake8 before doing any commits. File with config is here.

Contact

| Platform | Contact Info |
|---|---|
Email |
Twitter |

This project is a personal de, please respect its philosophy and don't use it for e!

Special thanks

Special thanks to all contributors & supporters that help improve pupy and make it a better 工具! :)

项目信息

开发语言：Python

Star 数：9001

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation 框架 written in python and C展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。