Cloak: backdoor any python script with some tricks

by do son · Published February 21, 2018 · Updated May 1, 2024

Cloak

Cloak is an intelligent python backdoor framework.

What it exactly does?

Cloak generates a python payload via msfvenom and then intelligently injects it into the python script you specify.

To evade basic detection, Cloak breaks the payload into several parts and places it in different places in the code. If you want the victim to run your injected script as root, Cloak can handle that too. Cloak will be further upgraded in future to support a wide range of payloads, platforms and evasion techniques.

For now, Cloak can backdoor python scripts but I am looking forward to do the same for C, bash and Perl scripts. Currently, the default connection method is https and Cloak creates a staged and reverse payload.