Skip to content

Instantly share code, notes, and snippets.

@duplaja
Forked from dedunumax/create_privatebin.py
Last active May 30, 2022 03:56
Show Gist options
  • Save duplaja/1aa90ddb7364a90d28a81e9ffa7781a8 to your computer and use it in GitHub Desktop.
Save duplaja/1aa90ddb7364a90d28a81e9ffa7781a8 to your computer and use it in GitHub Desktop.
Sample program to create PrivateBin notes using Python 3. Change URL on line 41 to your desired instance of PrivateBin
"""
This script creates a PrivateBin using Python 3.
Code is based on https://github.com/r4sas/PBinCLI repository.
Thanks a lot @r4sas!
Below modules should be installed in the environment.
requests
base58
pycryptodome
"""
import json
import requests
import traceback
import zlib
from Crypto.Cipher import AES
from Crypto.Hash import HMAC, SHA256
from Crypto.Protocol.KDF import PBKDF2
from Crypto.Random import get_random_bytes
from base58 import b58encode
from base64 import b64encode
def json_encode(string):
return json.dumps(string, separators=(',', ':')).encode()
def compress(data):
compressor = zlib.compressobj(wbits=-zlib.MAX_WBITS)
return compressor.compress(data) + compressor.flush()
def initialize_cipher(key, iv, adata, tagsize):
cipher = AES.new(key, AES.MODE_GCM, nonce=iv, mac_len=tagsize)
cipher.update(json_encode(adata))
return cipher
class PrivateBin:
def __init__(self, message):
self._server = "https://bin.example.com/" #Update this URL
self._version = 2
self._compression = 'zlib'
self._data = ''
self._password = ''
self._formatter = 'plaintext'
self._message = message
self._expiration = "7day"
self._discussion = False
self._burn_after_reading = False
self._iteration_count = 100000
self._salt_bytes = 8
self._block_bits = 256
self._tag_bits = 128
self._key = get_random_bytes(int(self._block_bits / 8))
def __get_hash(self):
return b58encode(self._key).decode()
def __derive_key(self, salt):
return PBKDF2(
self._key + self._password.encode(),
salt,
dkLen=int(self._block_bits / 8),
count=self._iteration_count,
prf=lambda password, salt: HMAC.new(
password,
salt,
SHA256
).digest())
def __encrypt(self):
iv = get_random_bytes(int(self._tag_bits / 8))
salt = get_random_bytes(self._salt_bytes)
key = self.__derive_key(salt)
adata = [
[
b64encode(iv).decode(),
b64encode(salt).decode(),
self._iteration_count,
self._block_bits,
self._tag_bits,
'aes',
'gcm',
self._compression
],
self._formatter,
int(self._discussion),
int(self._burn_after_reading)
]
cipher_message = {
'paste': self._message
}
cipher = initialize_cipher(key, iv, adata, int(self._tag_bits / 8))
cipher_text, tag = cipher.encrypt_and_digest(compress(json_encode(cipher_message)))
self._data = {
'v': 2,
'adata': adata,
'ct': b64encode(cipher_text + tag).decode(),
'meta': {
'expire': self._expiration
}
}
def create_post(self):
session = requests.Session()
self.__encrypt()
result = session.post(
url=self._server,
headers={
'X-Requested-With': 'JSONHttpRequest'
},
proxies={},
data=json_encode(self._data).decode()
)
try:
response = result.json()
print("PasteID: " + response['id'])
print("Password: " + self.__get_hash())
print("Delete token: " + response['deletetoken'])
link = "{}?{}#{}".format(self._server,
response['id'],
self.__get_hash())
print("Link: " + link)
return link
except:
print(traceback.format_exc())
print("Error creating paste")
private_bin = PrivateBin("Sample Text")
print("Link returned: " + private_bin.create_post())
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment