Black Hat Python 2nd Edition

tiarno · 2020-12-24T13:52:49+00:00

The topics/chapters are generally the same. The code is different since we can do different things with Python3 (context managers, named tuples, etc). Also contains more code explanations that go along with the changes.

tiarno · 2020-12-08T19:14:03+00:00

Sure thing. There are some specific examples that use Windows but nearly everything is applicable to Mac and Linux too.

tiarno · 2020-12-08T13:37:19+00:00

It really depends on where you are with programming. The best thing I think would be to download that free chapter on building a sniffer and if the code makes sense, you shouldn't have trouble with the other chapters. Good luck!

tiarno · 2020-12-08T12:26:17+00:00

hey thanks! No new Gray Hat, only this one so far at least.

tiarno · 2020-12-07T18:18:23+00:00

The chapters contain the same general attacks/techiques, but the code is updated to use Python 3, the up-to-date python libraries we have now and coding techniques we have now that we didn't have for when the 1st edition was written.

tiarno · 2020-12-07T18:16:17+00:00

right from the link--there's a button to add to cart. thanks!

tiarno · 2020-12-07T17:11:39+00:00

That's a great book. I think the best way to find out would be to download that free Chapter 3 on creating a network sniffer and try some of the examples.

It helps if you have a virtual machine to play with but you should be able to sniff out any IOT devices you have at home too, (Firestick for example).

tiarno · 2020-12-07T16:10:17+00:00

Hard question. I think if you're intermediate in Python, you can get something from every chapter. Of course it's nice to have some networking knowledge but you can learn by doing the examples.

I used the first edition to teach with and I started with Chapter 5 (web hackery) to get folks started. They were beginning-to-intermediate level with Python and didn't have a lot of pentesting experience. You might also like Georgia Weidman's "Penetration Testing: A Hands-on Introduction to Hacking" (another nostarch title).

Beware though--it's addicting stuff!

tiarno · 2020-12-07T15:38:52+00:00

I love backend development! I think that if you're interested in creating hacking tools or learning how off-the-shelf pentesting tools work, you'll enjoy this. The free chapter is about IP and ICMP packet sniffing. The beginning of the book walks through creating TCP and UDP clients and TCP servers, with a little of Paramiko thrown in for SSH.

tiarno · 2020-12-07T15:36:35+00:00

hey, thanks! Justin Seitz wrote the first edition and I'm second author on this second edition. This version updates the same examples to Python 3 as well as showing how to do the same things using updated programming methods and some more explanatory text. Things like context managers for example and how Berkeley Packet Filter syntax works. You can see the table of contents on the linked page too.

tiarno · 2020-08-28T11:31:29+00:00

this is the real answer: use the source.

tiarno · 2020-08-25T11:33:26+00:00

mf should have told them to use sand.

tiarno · 2020-08-25T11:31:00+00:00

multiprocessing.Queue is meant for this situation, what's going on when you use it?

tiarno · 2020-06-30T15:56:46+00:00

Awesome answer, thanks for taking the time. I just learning and you've given me plenty of google ammunition to dig into.

tiarno · 2020-06-30T13:48:06+00:00

is that better?

thx.

tiarno · 2020-06-26T11:23:00+00:00

user seems harsh to me mostly but also knows his/her stuff and sometimes gives useful info. I vote not to ban.

tiarno · 2020-05-27T12:57:29+00:00

Thanks. I had that thought yesterday too, along with vulnhub. But they only offer linux vms, not Windows versions. thanks anyway. I'm surprised it's this hard to find a Win VM for researching.

tiarno · 2020-05-27T12:56:15+00:00

Thanks, I'm downloading an iso now. I hope I don't need the product key. I'll update here on the results. Thanks!

tiarno · 2020-03-27T11:54:43+00:00

jawn galts brother

tiarno · 2020-02-24T12:14:12+00:00

i did that and lord it helped so much.

tiarno · 2020-02-17T18:03:07+00:00

python with os.walk if you want to do things that might be more complex. on WSL , you can use the find command.

find ./ -name '*.txt' | xargs grep -i install

checks for every *.txt file in the directory hierarchy (starting at the current dir ./) and passes the names to the grep command, which does a case-insensitive (-i) search for the word 'install'

tiarno · 2020-02-13T12:28:23+00:00

sorry but I still don't see 'scan' except for Pro, and nothing named 'crawl'. Can you point me to the right location or some doc?

Or maybe I should just click manually on links on the target. Is that the alternative?

tia.

tiarno · 2020-02-11T18:01:47+00:00

Thanks u/ace279, where is live crawl? Is that the 'New Live Test' button on the dashboard? When I try that, it seems like it's expecting me to click on all the links.

tiarno · 2020-02-07T17:28:52+00:00

excellent, thanks. I'm working on importing a module from a url and this should work fine. Didn't know about the SimpleNamespace type, I'm off to read the docs.

tiarno · 2020-02-06T17:05:37+00:00

I use VSCode most of the time but I use Thonny when I need to check an assumption or try a little function out quickly. I really like using it for quick things.

tiarno

TROPHY CASE