Skip to content

Check is your PyPI account vulnerable to account takeover attacks.

Notifications You must be signed in to change notification settings

aydinnyunus/pypi-check

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 

Repository files navigation

Account Takeover on PyPI Prevention

Blog Post : https://sockpuppets.medium.com/how-i-hacked-ctx-and-phpass-modules-656638c6ec5e

  • Check is your PyPI account vulnerable to account takeover attacks.

How to run the project? 🤔

  • Clone github repository in your local system git clone https://github.com/aydinnyunus/pypi-check.git
  • Move in pypi-check repository cd pypi-check
  • Create new virtual python environment python3 -m venv venv
  • Activate virtual python environment source venv/bin/activate
  • Install all the libraries mentioned in requirements.txt using pip install -r requirements.txt
  • Run Python file python main.py

How Attack works

Image Source : https://orca.security/resources/blog/python-supply-chain-attack-ctx-phpass/

Bug / Feature Request 👨‍💻

If you find a bug (the application couldn't handle the query and / or gave undesired results), kindly open an issue here by including your search query and the expected result.

If you'd like to request a new function, feel free to do so by opening an issue here. Please include sample queries and their corresponding results.

It is my first application with GUI.Thank you !.

Connect with me! 🌐

About

Check is your PyPI account vulnerable to account takeover attacks.

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages