forked from ustayready/python-pentesting
-
Notifications
You must be signed in to change notification settings - Fork 0
/
powerstrip.py
101 lines (90 loc) · 3.32 KB
/
powerstrip.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
#!/usr/bin/env python3
import argparse
import sys
import re
import os
__version__ = '1.0.3'
__author__ = 'Joff Thyer'
class PowerStrip():
functions = {}
def __init__(self, filename, stutter=False):
self.filename = filename
self.stutter = stutter
try:
rootname, ext = os.path.basename(filename).split('.')
except Exception as e:
print('{}: ps1 extension?'.format(e))
sys.exit(1)
self.outputfile = '{}-stripped.{}'.format(rootname, ext)
self.run()
def run(self):
print('[*] Reading Input file: {}'.format(self.filename))
infile = open(self.filename, 'rt')
self.contents = infile.readlines()
infile.close()
self.process_file()
print('[*] Writing Output file: {}'.format(self.outputfile))
outfile = open(self.outputfile, 'wt')
outfile.writelines(self.results)
outfile.close()
def process_file(self):
self.results = []
skip = False
rxp = re.compile(r'function\s([A-Za-z]+-[A-Za-z]+)')
for line in self.contents:
if self.stutter:
m = rxp.match(line)
if m:
self.functions[m.group(1)] = True
if '<#' in line:
skip = True
continue
elif '#>' in line:
skip = False
continue
elif re.match(r'^\s*#.*$', line):
continue
if not skip:
self.results.append(line)
print('[*] {} lines in original script.'.format(len(self.contents)))
print('[*] {} lines in new script.'.format(len(self.results)))
print('[*] {} total lines removed.'.format(len(self.contents) - len(self.results)))
if not self.stutter:
return
print('[*] Detected Function Names:')
out = ''
for f in sorted(self.functions.keys()):
out += '{}, '.format(f)
if len(out) > 60:
print(' [+] {}'.format(out))
out = ''
if len(out) < 60:
print(' [+] {}'.format(out[:-2]))
# fix function names
replaced = 0
for i, line in enumerate(self.results):
for f in self.functions:
if f in line:
self.results[i] = line.replace(f, f[0] + f)
replaced += 1
print('[*] {} total function names detected.'.format(len(self.functions)))
print('[*] {} function name substitutions.'.format(replaced))
if __name__ == '__main__':
progname = os.path.basename(sys.argv[0]).split('.')[0].title()
banner = '''\
[*] --------------------------------------------
[*] {}, Version: {}
[*] Author: {}, (c) 2020
[*] --------------------------------------------
'''.format(progname, __version__, __author__)
print(banner)
parser = argparse.ArgumentParser()
parser.add_argument('filename')
parser.add_argument(
'-s', '--stutter', default=False, action='store_true',
help='''\
Modify function names by adding additional letter at beginning.
"Invoke-Fun" becomes "IInvoke-Fun" for example.'''
)
args = parser.parse_args()
ps = PowerStrip(args.filename, args.stutter)