Skip to content

Proposal: support direct Python library import alongside CLI usage and add new techniques #12

Description

@InOr3p

Problem

Currently, using the repository as an imported Python library is not possible.

Proposed changes

I've updated my fork to stay in sync with the latest upstream changes while making the following improvements:

  • configured pyproject.toml so that the project can be imported as a Python library and can be used in other projects while keeping all other main usages available;
  • added new techniques, especially for the Etherhiding variant:
    • mshta commands extractor;
    • conhost commands extractor;
    • etherhiding payload extractor: extract smart contract, function selector, RPC endpoint, then send a request to the endpoint and decode the received payload;
    • base64 + xor javascript extractor

Current status and PR request

I have tested these updates locally - both standalone CLI execution and importing clickgrab into an external Python project work as expected without breaking existing functionality.

Would you be open to receiving a pull request for these changes (or one pull request for the Python library import and another one for the new techniques added)?

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions