sudo apt-get updatesudo apt-get install -y build-essential python-dev python-pip tcpdump python-capstone libnetfilter-queue-dev libffi-dev libssl-devAfter installaing the dependencies, Pythem can be installed using the Pip or source installation. The source installation requires cloning the framework on the Linux system using the following path.
git clone https://github.com/m4n3dw0lf/pythem
After cloning the framework, move to the Pythem folder and run the following command to complete the installation process.
cd pythem sudo python setup.py install
sudo pythemThe command loads almost a blank pythem interface. From here we can load any Pythem utility by just typing the commands. To know the working of each utility/feature of Pythem, just add the help argument to the desired utlity/feature. For example, if we want to use the scanning utility of Pythem, and want to know about the syntax required to perform the scanning on the target hosts, we can run the following help command to explore this feature.
scan helpThe output of above command can be seen in the following screenshot.
It shows the filters that can be used for scanning along with the syntax, illustrated with an example. The same procedure can be applied to all the Pythem utilities, such as sniff, dos, brute hash etc.
As mentioned above, Pythem is a multi-tasking framework that can perform various security tests on a network. For instance, if we desire to simulate the network sniffing attack, we can simply achieve this by setting the network interface and providing the host ip along with the desired port. For example, we want to monitor the network traffic for wlan0 interface on port 1337 with the host ip address as 192.168.1.1, we just type ‘sniff’ in the Pythem terminal.
sniffPythem prompts for the port number and the host IP address that can be provided in the following way.
port 1337 and host ip 192.168.1.1
The framework also gives the option of storing the sniffed packets using a .pcap. Once configured, the framework starts the sniffer to monitor the network traffic for the desired interface.
Besides networks security assessment, Pythem can perform web application tasks like crawling the web application links for status codes, port scanning of the target web application, and running a fake web page for credentials harvesting etc.
