Black-Hat-Python-2nd-Edition.pdf

(3102 KB) Pobierz
||||||||||||||||||||
||||||||||||||||||||
||||||||||||||||||||
CONTENTS IN DETAIL
PRAISE FOR THE FIRST EDITION
TITLE PAGE
COPYRIGHT
DEDICATION
ABOUT THE AUTHORS
FOREWORD
PREFACE
ACKNOWLEDGMENTS
CHAPTER 1: SETTING UP YOUR PYTHON ENVIRONMENT
Installing Kali Linux
Setting Up Python 3
Installing an IDE
Code Hygiene
CHAPTER 2: BASIC NETWORKING TOOLS
Python Networking in a Paragraph
TCP Client
UDP Client
TCP Server
Replacing Netcat
||||||||||||||||||||
||||||||||||||||||||
Kicking the Tires
Building a TCP Proxy
Kicking the Tires
SSH with Paramiko
Kicking the Tires
SSH Tunneling
Kicking the Tires
CHAPTER 3: WRITING A SNIFFER
Building a UDP Host Discovery Tool
Packet Sniffing on Windows and Linux
Kicking the Tires
Decoding the IP Layer
The ctypes Module
The struct Module
Writing the IP Decoder
Kicking the Tires
Decoding ICMP
Kicking the Tires
CHAPTER 4: OWNING THE NETWORK WITH SCAPY
Stealing Email Credentials
Kicking the Tires
ARP Cache Poisoning with Scapy
Kicking the Tires
pcap Processing
Kicking the Tires
||||||||||||||||||||
||||||||||||||||||||
CHAPTER 5: WEB HACKERY
Using Web Libraries
The urllib2 Library for Python 2.x
The urllib Library for Python 3.x
The requests Library
The lxml and BeautifulSoup Packages
Mapping Open Source Web App Installations
Mapping the WordPress Framework
Testing the Live Target
Kicking the Tires
Brute-Forcing Directories and File Locations
Kicking the Tires
Brute-Forcing HTML Form Authentication
Kicking the Tires
CHAPTER 6: EXTENDING BURP PROXY
Setting Up
Burp Fuzzing
Kicking the Tires
Using Bing for Burp
Kicking the Tires
Turning Website Content into Password Gold
Kicking the Tires
CHAPTER 7: GITHUB COMMAND AND CONTROL
Setting Up a GitHub Account
Creating Modules
Configuring the Trojan
||||||||||||||||||||
||||||||||||||||||||
Building a GitHub-Aware Trojan
Hacking Python’s import Functionality
Kicking the Tires
CHAPTER 8: COMMON TROJANING TASKS ON WINDOWS
Keylogging for Fun and Keystrokes
Kicking the Tires
Taking Screenshots
Pythonic Shellcode Execution
Kicking the Tires
Sandbox Detection
CHAPTER 9: FUN WITH EXFILTRATION
Encrypting and Decrypting Files
Email Exfiltration
File Transfer Exfiltration
Exfiltration via a Web Server
Putting It All Together
Kicking the Tires
CHAPTER 10: WINDOWS PRIVILEGE ESCALATION
Installing the Prerequisites
Creating the Vulnerable BlackHat Service
Creating a Process Monitor
Process Monitoring with WMI
Kicking the Tires
Windows Token Privileges
Winning the Race
Kicking the Tires
||||||||||||||||||||

Plik z chomika:

Inne pliki z tego folderu:

Inne foldery tego chomika:

Zgłoś jeśli naruszono regulamin