password protect terminal in python+windows

[3vilp4wn]

Hello!
I just password protected my terminal in python+windows, and someone asked how I did it on irc, so I figured I'd post it here.

Step 1: make the python script:
somefile.py

Code: [Select]

import time
passwd = raw_input('C:\Documents and Settings\yourname>')  #you can have it ask for a password as well, but I prefer this.

if passwd == 'somepassword':
    print 'password accepted.  Welcome, hacker.'
else:
    print 'Fuck off, n00b.'
    print 'You have been locked out of this terminal.'
    time.sleep(42)
    print "Jesus, just *fuck off*, ok?"
    time.sleep(42)
    print "Still waiting?"
    time.sleep(42)
    print "'Cause, I'm not gonna let you get at the terminal."
    while True:
        time.sleep(42)
Step 2: create the batch file that will run the python file.  it's just one line:
somefile.bat

Code: [Select]

python C:\path\to\password\program.py
step 3: set the batch file to run when the terminal is started up.
open the run menu.  Windows key+R or start -> run
type "regedit"
Navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor in the side bar.  right click and edit the "Autorun" property.
Type in the path to the batch file from step 2.


Now open the command prompt!
it should look normal, but if you don't type in the right password,  it gets mad at you 
Note that removing python from the classpath or pressing ctrl+C will bypass this, but it's useful for weeding out the skids.

[vezzy]

Try putting the function in a thread with a highly long time.sleep() value.

That should effectively disable the KeyboardInterrupt exception and make this script useful.

[techb]

Try putting the function in a thread with a highly long time.sleep() value.

That should effectively disable the KeyboardInterrupt exception and make this script useful.

Unless the thread is run as daemon, the interrupt will work.

[vezzy]

Hold on, in that case you can directly disable the signals using Python's built-in module.

Here's your script modified, so that it rejects all KeyboardInterrupt (Ctrl+C) and Stop (Ctrl+Z) exceptions: (*nix-only, I'm afraid)

Code: [Select]

import signal, sys

while True:

    def anti_stop(arg1, arg2):
        print 'DENIED'

    def anti_interrupt(arg1, arg2):
        print 'DENIED'

    signal.signal(signal.SIGINT, anti_interrupt) # disable KeyboardInterrupt
    signal.signal(signal.SIGTSTP, anti_stop) # disable Stop

    passwd = raw_input('Enter password: ')

    if passwd == 'shotgundebugging':
           print 'Password accepted.'
           sys.exit()

EDIT: Damn, it fails upon incorrect password. Let me think of a workaround...

EDIT 2: OK, I wrapped it around a while loop. Now it works.

[pyte]

Hello!
I just password protected my terminal in python+windows, and someone asked how I did it on irc, so I figured I'd post it here.

Step 1: make the python script:
somefile.py

Code: [Select]

import time
passwd = raw_input('C:\Documents and Settings\yourname>')  #you can have it ask for a password as well, but I prefer this.

if passwd == 'somepassword':
    print 'password accepted.  Welcome, hacker.'
else:
    print 'Fuck off, n00b.'
    print 'You have been locked out of this terminal.'
    time.sleep(42)
    print "Jesus, just *fuck off*, ok?"
    time.sleep(42)
    print "Still waiting?"
    time.sleep(42)
    print "'Cause, I'm not gonna let you get at the terminal."
    while True:
        time.sleep(42)
Step 2: create the batch file that will run the python file.  it's just one line:
somefile.bat

Code: [Select]

python C:\path\to\password\program.py
step 3: set the batch file to run when the terminal is started up.
open the run menu.  Windows key+R or start -> run
type "regedit"
Navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor in the side bar.  right click and edit the "Autorun" property.
Type in the path to the batch file from step 2.


Now open the command prompt!
it should look normal, but if you don't type in the right password,  it gets mad at you 
Note that removing python from the classpath or pressing ctrl+C will bypass this, but it's useful for weeding out the skids.

I think this is a good one. how can it be implemented in Unix??
took the code tho 

[proxx]

I think this is a good one. how can it be implemented in Unix??
took the code tho 

Its pretty portable and useless
Well as this isnt gonna offer any protection at all but if you want it to "password protect" a terminal under linux you could just add it to the .bashrc file.
Indeed you should catch the interupts such as ctrl-c ,ctrl-x,ctrl-z.

Welcome hacker

LMFAO

[pyte]

Its pretty portable and useless
Well as this isnt gonna offer any protection at all but if you want it to "password protect" a terminal under linux you could just add it to the .bashrc file.
Indeed you should catch the interupts such as ctrl-c ,ctrl-x,ctrl-z.
LMFAO

Already done.i like the deception it offers. no one will tamper with my terminal unless he knows its useless.
he has to come from EZ.

[proxx]

Why not just use the unix login if you want a login.
You can setup it up in such a way that every new virtual terminal requires a login.
That way you actually have a decent protection.

Coding stuff yourself is always more fun , I understand that part.

[vezzy]

Already done.i like the deception it offers. no one will tamper with my terminal unless he knows its useless.
he has to come from EZ.

Since you're on a Unix-like machine, why don't you use the signals module to escape interrupts, so as to make it actually useful and not just a placebo (as in my code snippet above)?

But hey, have fun.

[pyte]

Since you're on a Unix-like machine, why don't you use the signals module to escape interrupts, so as to make it actually useful and not just a placebo (as in my code snippet above)?

But hey, have fun.

I have tried editing the keyboard interapt part but aint working in my way. i know i didnt use the signal module(which i think is silly) but still wanted to see if my way would work.
here is the code, any errors?

Code: [Select]


import time
import pyttsx
import datetime
import os


saa = time.ctime()
passwd = raw_input("-- ")
if passwd == '':
    try:
      passwd = raw_input("-- ")
      if passwd =='****':
        print '                                       welcome Hacker, its',saa
                                                       
   
    except KeyboardInterrupt:
       print'that wont work here!'
else:
    print'Not really!'
    time.sleep(20)
    print 'You have been locked out of this terminal.'
    time.sleep(42)
    print "Damn!Just get lost, ok?"
    time.sleep(42)
    print "Still waiting?"
    time.sleep(42)
    print "ill still be here and wount let you in..Think about that!"
    while True:
        time.sleep(42)



[proxx]

I have tried editing the keyboard interapt part but aint working in my way. i know i didnt use the signal module(which i think is silly) but still wanted to see if my way would work.
here is the code, any errors?

Code: [Select]


import time
import pyttsx
import datetime
import os


saa = time.ctime()
passwd = raw_input("-- ")
if passwd == '':
    try:
      passwd = raw_input("-- ")
      if passwd =='****':
        print '                                       welcome Hacker, its',saa
                                                       
   
    except KeyboardInterrupt:
       print'that wont work here!'
else:
    print'Not really!'
    time.sleep(20)
    print 'You have been locked out of this terminal.'
    time.sleep(42)
    print "Damn!Just get lost, ok?"
    time.sleep(42)
    print "Still waiting?"
    time.sleep(42)
    print "ill still be here and wount let you in..Think about that!"
    while True:
        time.sleep(42)



Yes you should stuff the code inside a loop.
With the except statement your breaking out in this case.

Just do a while succes != True:
Only when the correct password is given change the succes to True or whatever.

[vezzy]

Here's a further improvement with Python's getpass module to hide output while the password being typed in:

Code: [Select]

import signal, sys, getpass

while True:

    def anti_stop(arg1, arg2):
        print 'DENIED'

    def anti_interrupt(arg1, arg2):
        print 'DENIED'

    signal.signal(signal.SIGINT, anti_interrupt) # disable KeyboardInterrupt
    signal.signal(signal.SIGTSTP, anti_stop) # disable Stop

    passwd = getpass.getpass("Enter password: ")

    if passwd == 'shotgundebugging':
           print 'Password accepted.'
           sys.exit()
I'd say it's somewhat useful now.

[proxx]

Here's a further improvement with Python's getpass module to hide output while the password being typed in:

Code: [Select]

import signal, sys, getpass

while True:

    def anti_stop(arg1, arg2):
        print 'DENIED'

    def anti_interrupt(arg1, arg2):
        print 'DENIED'

    signal.signal(signal.SIGINT, anti_interrupt) # disable KeyboardInterrupt
    signal.signal(signal.SIGTSTP, anti_stop) # disable Stop

    passwd = getpass.getpass("Enter password: ")

    if passwd == 'shotgundebugging':
           print 'Password accepted.'
           sys.exit()
I'd say it's somewhat useful now.

Yeah something like that already looks better.

[3vilp4wn]

Looking at things other people have posted, here's an updated version:

Code: [Select]

import sys, getpass, ctypes

fail = True
failcount = 0

while fail:
    try:
        if failcount == 3:
            user32 = ctypes.cdll.LoadLibrary("user32.dll")
            user32.LockWorkStation()

        passwd = getpass.getpass("Enter password: \n")

        if passwd == 'foobar':
            print 'Password accepted.'
            fail = False
        else:
            failcount = failcount + 1
    except:
        pass

In the interest of making this even more windows only, it uses user32.dll to lock the computer after 3 failed password attempts.  Good security would be one failed attempt, but whatever.

I couldn't get the signal module to work, so I just used a giant try/except block.

[pyte]

There is one thing with this code. when i run it and throw in a keyboardinterrupt it really doesn't flow .
i don't know how to deal with this coz what i really am thinking of a way to leave anyone out even if you press the ctrl +c.