Your trusty Python package: TTPs of attacks on OSS in Python
summary
Publishes a fake package to Test PyPI and reuses starjacking (a repo with ~5,000 stars, ~2,000 forks) to make it look legitimate in under five minutes, then demonstrates six obfuscation methods — base64+unicode+encryption+bytecode and an embedded Go binary — that send JSON (OS, IP, username) to a listener. Installation or import triggers exfiltration via setup.py or __init__.py; a reverse-shell via enro tunneling succeeds when Defender is disabled but Windows Defender blocks reverse shell during the demo.
AI-written summary · about
chapters (15)
- 0:00intro
- 1:43preamble
- 2:04disclaimer
- 2:28contents
- 3:01why this topic is important?
- 5:09history of supply-chain attacks
- 8:15ttps in supply-chain attacks
- 15:46starjacking demo
- 33:08installation & delivery
- 35:55demo
- 46:14exfiltration and c2
- 47:26demo
- 1:01:16defences
- 1:11:42credits and references
- 1:12:48thank you!
related talks
43mHow to hack and defend (your) open source
32mHacking the OSS Supply Chain
20mMalicious Needle in a Haystack - PyPi Security Pitfalls
18mMalicious Needle in a Haystack – PyPi Security Pitfalls
42mHacking the OSS Supply Chain
13mKeynote: Hacking the OSS Supply Chain
35mSecuring Python projects Supply Chain
25mTrusting Your Open-Source Software Supplier