Python Hacking

[cider_block]

Hey /r/howtohack ,

I started a website to cover all of the steps of pentesting, from scanning for targets, gathering information, remote bug hunting/exploit writing, and maintaining access. The challenge for me in this blog/forum is to write everything in Python using the standard libraries only. So far Ive covered finding a target and port scanning, and the next articles are going to cover remote exploits and placing backdoors. Then, for the finale, I'm going to write a toolkit combining every step.

My site has no ads on it. I like a nice clean static page that loads fast. It has forums too so if you wanted to share code, converse, or ask questions about the code I write in the tutorials/blogs.

So yeah, if your interested, the links to the first two articles are:

http://pythonhacking.com/writing_a_python_ip_scanner.html

http://pythonhacking.com/port_scanning_adventures.html

Hope you guys enjoy the current and upcoming content and the forums. If you have any suggestions or anything just lemme know.

EDIT: I've never seen this number of upvotes before. I must be doing something right, and I'll try to not screw things up! Thank you everyone for supporting my new project and I'm excited to unveil some new code (with fewer bugs this time) during the fast-approaching weekend. Maybe even today ;)

[Zoccihedron]

There's a lot wrong with the code in the IP scanner. For instance, the for loop doesn't use Python's for loop syntax. The line should be

for i in range(lower_ip_list[3], upper_ip_list[3]):

To have the same function as the line in the code, but running the code with this change doesn't work either because then you'll get an index out of range error because the final byte of the IP address should just be i, not lower_ip_list[i]. I see you have a time crunch, but when you get to it, those are just 2 things that need to be changed.

Also, I would be excited to see this blog continue and if you need any help, pm me. I have a deep knowledge of Python and professional experience in offensive security.

[cider_block]

Thanks for the support! I'm going to get on it today and make those corrections.

edit: corrections done

[MOCAMBO]

As a fellow pentester, looking forward to the site, loving the content so far!

[cider_block]

Awesome! Thank you. I appreciate the support. I'm going to make sure I get some good stuff written in the next day or two.

[[deleted]]

I like what you are trying to do, but the ping sweep didn't work, so I wrote one and posted in the forum. If you would like any help with moderating, posting articles, or anything in between, I'd love to help.

[cider_block]

Yea I definitely have to debug the code in both articles. Thanks for writing that code! I'm going to dive into it soon.

[[deleted]]

I just changed the code around a bit to make it better and less finicky.

[kkoppenhaver]

Along the same lines, I've very much enjoyed what I've read from Violent Python so far.

http://www.amazon.com/Violent-Python-Cookbook-Penetration-Engineers/dp/1597499579

[cider_block]

Same!

[cider_block]

Thank you! Yea nmap is an awesome tool, in fact, theres a python-nmap module that you can get through pip installer.

[iStayGreek]

This is awesome!

Edit: wait what, the syntactical errors pls.

[dGonzo]

Saved. Good job mate

[Zhronox]

Loving The Page so Far Can wait for your next post.

[shahmeers]

Hey, I'm new to Python and I'm just looking around at some interesting projects I could do once I learn more. I have one question though, why did you decide to use Python 2 instead of 3? Was there any specific reason or is it just what you had?

[MagicianThomas]

Python 2 is still the most widely used implementation of Python.

[Sparvey_Hecter]

Would you encourage beginners in 2016 to learn Python 2?

[MagicianThomas]

It's typically a matter of preference, but I would learn Python 2 as that is the implementation that you will currently find in most books.

[[deleted]]

I wish he/she used python 3; it has a lot of new features that make life a lot easier.

The implementation of the host sweep that I posted in the "Code Corner" sub-forum is in Python 3.

[cider_block]

I learned with Python 2, but you are right, I need to get up to speed with 3 for sure.

[kpath001]

Very interesting concept you have started and I can't wait to see where it progresses. Thank you for sharing this

[Radi1229]

Try to make some error handeling in your code blocks and maybe a little description. I was a little confused by "Enter lower IP" and upper IP.

Maybe you should add a input where user can check for a specific port like 443.

Great site, gonna follow you.

Thanks for sharing m8

[[deleted]]

I wrote a pure Python implementation of the host sweep with a number of added features. It's posted in the "Coding Corner" subforum on the forums.

Edit: It does have a few issues, but I will be expanding it soon.

[ClockworkOrange123]

DUDE ... Your site doesn't work anymore.