MarkBaggett · August 2, 2022 19:16 · Aug 2, 2022
diff --git a/liam_neeson.py b/liam_neeson.py
@@ -0,0 +1,79 @@
+#Liam Neeson is the single most protection that any organization can take to protect their Linux passwords hashes.
+#Once Liam Neeson is protecting your shadow file all your hashes are invisible to terrorist tools like cat, less and others that process bash escape sequences
+#Are you seriously thinking about using this in production?  Back up your files and test it first.
+#Author @MarkBaggett
+
+import re
+import argparse
+import os
+import sys
+
+def moveup(lines):
+    return "\x1b[%sA" % (lines)
+
+def movedown(lines):
+    return "\x1b[%sB" % (lines)
+
+def moveright(lines):
+    return "\x1b[%sC" % (lines)
+
+def moveleft(lines):
+    return "\x1b[%sD" % (lines)
+
+
+liam = "I don't know who you are. I don't know what you want. If you are looking for ransom, I can tell you I don't have money. But what I do have are a very particular set of skills, skills I have acquired over a very long career. Skills that make me a nightmare for people like you. If you leave my system alone now, that'll be the end of it. I will not look for you, I will not pursue you. But if you don't, I will look for you, I will find you, and I will kill you."
+
+
+parser=argparse.ArgumentParser()
+parser.add_argument('-p','--protect', action="store_true", help="Have Liam Neeson protect your /etc/shadow file")
+parser.add_argument('-u','--unprotect', action="store_true", help="I am friggin Chuck Norris.  I don't need Liam Neeson")
+parser.add_argument('-a','--alt_path', default = '/etc/shadow', help="I am afraid of Liam Neeson touching my shadow file. Protect this file instead.")
+args = parser.parse_args()
+
+if len(sys.argv) <= 1:
+    parser.print_help()
+    sys.exit(0)
+
+if not os.path.exists(args.alt_path):
+   print("File %s not found. If that file has been Taken, you've  obviously asked for Liam's protection after the fact." % (args.alt_path))
+   sys.exit(1)
+
+with open(args.alt_path) as fh:
+     shadow_list = fh.readlines()
+     fh.close()
+
+if not all("\x1b[" not in x for x in shadow_list) and not args.unprotect:
+     print("File %s is already protected.  One Liam Neeson is more than enough protection for anything." % (args.alt_path))
+     sys.exit(1)
+
+liam_list = []
+for i in re.split(r"[,.]",liam):
+   liam_list.append("{0: ^100}".format(i))
+
+file_length = len(shadow_list)
+line_spacing = file_length//len(liam_list)
+header = (file_length % len(liam_list)) // 2
+footer = (file_length % len(liam_list)) - header
+
+cover = moveup(file_length)+moveright(15)
+cover = cover + (((" "*100)+"\n"+moveright(15)) * header)
+for i in liam_list:
+     cover = cover + i + "\n"+moveright(15)
+     if line_spacing > 1:
+         cover = cover + ((" "*100)+"\n"+moveright(15)) * (line_spacing-1)
+cover = cover + (((" "*100)+"\n"+moveright(15)) * footer) + "\n"
+
+if args.protect:
+    with open(args.alt_path,"a") as fh:
+        fh.write(cover)
+        fh.close()
+    print("File %s is now protected by Liam Neeson" % (args.alt_path))
+
+if args.unprotect:
+   clean_shadow = [ x for x in shadow_list if "\x1b[" not in x]
+   with open(args.alt_path,"w") as fh:
+       fh.write("".join(clean_shadow))
+       fh.close()
+
+
+
No results found