黑客与逆向工程师的Python编程指南：《灰帽子Python》

需积分: 9 17 浏览量更新于2024-07-22 收藏 3.17MB PDF 举报

"《灰帽子Python编程》是一本专为黑客和逆向工程师编写的书籍，由Justin Seitz撰写。这本书是关于如何利用Python这一强大工具进行技术探索和安全领域的实践。作者以其在信息安全领域的专业知识，深入浅出地讲解了Python编程在渗透测试、漏洞分析和代码逆向工程中的应用。书中涵盖了Python的基础语法、库使用、脚本编写以及高级技巧，旨在帮助读者提升黑客技能，同时强调合法和道德的渗透原则，提倡在授权范围内进行学习和实践。本书适合对网络安全感兴趣的专业人士，尤其是那些希望通过Python工具进行安全研究和测试的读者。它不仅仅是一本技术教程，还包含了许多实际案例和策略，使读者能够将理论知识转化为实战能力。书中的版权信息明确指出，未经版权所有者和出版社的书面许可，不得以任何形式复制或传播。《灰帽子Python》由William Pollock出版社出版，由Megan Dunchak担任生产编辑，Octopod Studios负责封面设计，Tyler Ortman作为发展编辑，Dave Aitel进行了技术审阅，Linda Recktenwald进行了校对，而Riley Hoffman和Kathleen Mish负责排版，Rachel Kai负责校对工作，Fred Brown和Allegro Technical Indexing负责索引制作。读者可以通过访问Justin Seitz的个人主页获取更多信息，或者加入QQ群242181462与其他学习者交流。 ISBN-10:1-59327-192-1和ISBN-13:978-1-59327-192-3是本书的国际标准书号，便于购买和查找。这是一本在2009年发布的版权作品，旨在提供最新且实用的黑客与逆向工程Python知识，对于想要在这个领域深入发展的读者来说，是一份不可多得的参考资料。"

FOREWORD

The phrase most often heard at Immunity is probably,

“Is it done yet?” Common parlance usually goes some-

thing like this: “I’m starting work on the new ELF

importer for Immunity Debugger.” Slight pause. “Is it

done yet?” or “I just found a bug in Internet Explorer!”

And then, “Is the exploit done yet?” It’s this rapid pace of development, modi-

fication, and creation that makes Python the perfect choice for your next

security project, be it building a special decompiler or an entire debugger.

I find it dizzying sometimes to walk into Ace Hardware here in South

Beach and walk down the hammer aisle. There are around 50 different kinds

on display, arranged in neat rows in the tiny store. Each one has some minor

but extremely important difference from the next. I’m not enough of a handy-

man to know what the ideal use for each device is, but the same principle holds

when creating security tools. Especially when working on web or custom-built

apps, each assessment is going to require some kind of specialized “hammer.”

Being able to throw together something that hooks the SQL API has saved an

Immunity team on more than one occasion. But of course, this doesn’t just

xiv Foreword

apply to assessments. Once you can hook the SQL API, you can easily write a

tool to do anomaly detection against SQL queries, providing your organiza-

tion with a quick fix against a persistent attacker.

Everyone knows that it’s pretty hard to get your security researchers to

work as part of a team. Most security researchers, when faced with any sort of

problem, would like to first rebuild the library they are going to use to attack

the problem. Let’s say it’s a vulnerability in an SSL daemon of some kind. It’s

very likely that your researcher is going to want to start by building an SSL

client, from scratch, because “the SSL library I found was ugly.”

You need to avoid this at all costs. The reality is that the SSL library is

not ugly—it just wasn’t written in that particular researcher’s particular style.

Being able to dive into a big block of code, find a problem, and fix it is the

key to having a working SSL library in time for you to write an exploit while

it still has some meaning. And being able to have your security researchers

work as a team is the key to making the kinds of progress you require. One

Python-enabled security researcher is a powerful thing, much as one Ruby-

enabled one is. The difference is the ability of the Pythonistas to work

together, use old source code without rewriting it, and otherwise operate

as a functioning superorganism. That ant colony in your kitchen has about

the same mass as an octopus, but it’s much more annoying to try to kill!

And here, of course, is where this book helps you. You probably already

have tools to do some of what you want to do. You say, “I’ve got Visual Studio.

It has a debugger. I don’t need to write my own specialized debugger.” Or,

“Doesn’t WinDbg have a plug-in interface?” And the answer is yes, of course

WinDbg has a plug-in interface, and you can use that API to slowly put

together something useful. But then one day you’ll say, “Heck, this would

be a lot better if I could connect it to 5,000 other people using WinDbg and

we could correlate our results.” And if you’re using Python, it takes about

100 lines of code for both an XML-RPC client and a server, and now everyone

is synchronized and working off the same page.

Because hacking is not reverse engineering—your goal is not to come

up with the original source code for the application. Your goal is to have a

greater understanding of the program or system than the people who built it.

Once you have that understanding, no matter what the form, you will be able

to penetrate the program and get to the juicy exploits inside. This means

that you’re going to become an expert at visualization, remote synchroni-

zation, graph theory, linear equation solving, statistical analysis techniques,

and a whole host of other things. Immunity’s decision regarding this has

been to standardize entirely on Python, so every time we write a graph

algorithm, it can be used across all of our tools.

In Chapter 6, Justin shows you how to write a quick hook for Firefox to

grab usernames and passwords. On one hand, this is something a malware

writer would do—and previous reports have shown that malware writers do

use high-level languages for exactly this sort of thing (http://philosecurity.org/

2009/01/12/interview-with-an-adware-author). On the other hand, this is

precisely the sort of thing you can whip up in 15 minutes to demonstrate

剩余220页未读，继续阅读

609223423

粉丝: 0
资源: 4

黑客与逆向工程师的Python编程指南：《灰帽子Python》

灰帽子Python电子书

Python灰帽子中文 高清版PDF

PYTHON灰帽子

Python灰帽子1

python灰帽子源代码

Python灰帽子.pdf

python灰帽子书源码

《Python灰帽子》源码

Python灰帽子 书中源码

Python灰帽子中文.pdf

最新资源

Python灰帽子中文高清版PDF

Python灰帽子书中源码