yezz123/athena

Test your Security Skills, and Clean Code Development as a Pythonist, Hacker & Warrior 🥷🏻

Hey, Yezz123 here! 👋

---

I'm Yasser Tahiri, Also known as Yezz123, a Software Engineer, Comedian 🤡 by day, OSS 🛠 by night.

• ⚒️ Python / C++ / JavaScript / Rust.
• ✏️ Read to Know The Tech & Tools I use.
• 🌱 I help founders add value by crafting using Python tools.
• 💭 Ask me anything at @Twitter!
• 🔑 GPG key: mQINBGEvjd8BEADja5Cz
• 🫀 Sponsor me

---

athena's Issues

Pyotp Module Error in mod_mfa.py

After stepping through the installation process and install pyotp I receive the below error:

sudo python3.8 Athena.py
Traceback (most recent call last):
File "Athena.py", line 11, in
from mod_mfa import mod_mfa
File "/home/n0ps/Athena/bad/mod_mfa.py", line 4, in
import pyotp
ModuleNotFoundError: No module named 'pyotp'

"Bad" Directory : Checking Deserialization & Class Injection

• Try to replace a serialized object with an object of an entirely different class.
• Athena's data here based on Pass /User & post.
• Try this attack with Php or Java(SB).

Resources :

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1465
• https://www.exploit-db.com/exploits/24465
• https://portswigger.net/web-security/deserialization
• https://portswigger.net/web-security/deserialization/exploiting
• https://docs.python-guide.org/scenarios/serialization/
• https://cheatsheetseries.owasp.org/cheatsheets/Deserialization_Cheat_Sheet.html