Python黑客攻击指南：自动化网络渗透与取证技术

需积分: 9 140 浏览量更新于2024-07-18 收藏 1.91MB PDF 举报

"《暴力Python：黑客、取证分析师、渗透测试人员与安全工程师的实战指南》是由TJ.O'Connor所著的一本IT领域的技术书籍。本书的核心内容围绕如何将理论上的进攻性计算概念转化为实际操作，不再依赖于现成的攻击工具，而是通过Python编程语言来开发自己的攻击手段。作者强调了Python在网络安全中的广泛应用，包括大规模网络攻击自动化、元数据提取、取证分析以及网络流量的拦截和分析。书中深入讲解了如何编写Python脚本来执行复杂的网络攻击，如利用Python对网络数据包进行深度操作，甚至伪造无线帧来攻击无线和蓝牙设备。此外，它还指导读者如何数据挖掘流行的社交媒体网站，以避开现代反病毒软件的防护。《暴力Python》不仅适合黑客和渗透测试人员，也对网络安全研究人员、取证分析师和安全工程师具有很高的实用价值。该书不仅包含了大量的实践案例和代码示例，还强调了版权法律的重要性，提醒读者在复制或传播任何内容时必须获得书面许可。版权信息明确指出，未经许可，任何形式的复制或传输都是违法的，并提供了关于如何申请许可和查询出版商版权政策的详细链接。《暴力Python》是一本实用的IT技术书籍，对于希望提升自身网络安全技能的专业人士来说，它提供了一个由浅入深的学习路径，从基础概念到高级技巧，是提升网络安全攻防能力的重要参考资源。"

CHAPTER 1: Introduction

copying build/lib.linux-x86_64-2.6/nmap/nmap.py -> /usr/local/lib/

python2.6/dist-packages/nmap

byte-compiling /usr/local/lib/python2.6/dist-packages/nmap/__init__.py

to __init__.pyc

byte-compiling /usr/local/lib/python2.6/dist-packages/nmap/example.py

to example.pyc

byte-compiling /usr/local/lib/python2.6/dist-packages/nmap/nmap.py to

nmap.pyc

running install_egg_info

Writing /usr/local/lib/python2.6/dist-packages/python_nmap-0.2.4.egg-

info

To make installing Python packages even easier, Python setuptools provides

a Python module called easy_install. Running the easy installer module fol-

lowed by the name of the package to install will search through Python reposi-

tories to ﬁnd the package, download it if found, and install it automatically.

programmer:∼ # easy_install python-nmap

Searching for python-nmap

Readinghttp://pypi.python.org/simple/python-nmap/

Readinghttp://xael.org/norman/python/python-nmap/

Best match: python-nmap 0.2.4

Downloadinghttp://xael.org/norman/python/python-nmap/python-nmap-

0.2.4.tar.gz

Processing python-nmap-0.2.4.tar.gz

Running python-nmap-0.2.4/setup.py -q bdist_egg --dist-dir /tmp/easy_

install-rtyUSS/python-nmap-0.2.4/egg-dist-tmp-EOPENs

zip_safe flag not set; analyzing archive contents...

Adding python-nmap 0.2.4 to easy-install.pth file

Installed /usr/local/lib/python2.6/dist-packages/python_nmap-0.2.4-

py2.6.egg

Processing dependencies for python-nmap

Finished processing dependencies for python-nmap

To rapidly establish a development environment, we suggest you download

a copy of the latest BackTrack Linux Penetration Testing Distribution from

http://www.backtrack-linux.org/downloads/. The distribution provides a

wealth of tools for penetration testing, along with forensic, web, network

analysis, and wireless attacks. Several of the following examples will rely on

tools or libraries that are already a part of the BackTrack distribution. When

an example in the book requires a third-party package outside of the standard

library and built-in modules, the text will provide a download site.

Setting Up Your Development Environment

When setting up a developmental environment, it may prove useful to download

all of these third-party modules before beginning. On Backtrack, you can install

the additional required libraries with easy_install by issuing the following com-

mand. This will install most of the required libraries for the examples under Linux.

programmer:∼ # easy_install pyPdf python-nmap pygeoip mechanize

BeautifulSoup4

Chapter ﬁve requires some speciﬁc Bluetooth libraries that are not available

from easy_install. You can use the aptitude package manager to download and

install these librariers.

attacker# apt-get install python-bluez bluetooth python-obexftp

Reading package lists... Done

Building dependency tree

Reading state information... Done

<..SNIPPED..>

Unpacking bluetooth (from .../bluetooth_4.60-0ubuntu8_all.deb)

Selecting previously deselected package python-bluez.

Unpacking python-bluez (from .../python-bluez_0.18-1_amd64.deb)

Setting up bluetooth (4.60-0ubuntu8) ...

Setting up python-bluez (0.18-1) ...

Processing triggers for python-central .

Additionally, a few examples in Chapter ﬁve and seven require a Windows

installation of Python. For the latest Python Windows Installer, visit http://

www.python.org/getit/.

In recent years, the source code for Python has forked into two stable

branches-2.x, and 3.x. The original author of Python, Guido van Rossum,

sought to clean up the code to make the language more consistent. This action

intentionally broke backward compatibility with the Python 2.x release. For

example, the author replaced the print statement in Python 2.x with a print()

function that required arguments as parameters. The examples contained in the

following chapter are meant for the 2.x branch. At the time of this book’s pub-

lication, BackTrack 5 R2 offered Python 2.6.5 as the stable version of Python.

programmer# python -V

Python 2.6.5

Interpreted Python Versus Interactive Python

Similar to other scripting languages, Python is an interpreted language. At

runtime an interpreter processes the code and executes it. To demonstrate the

use of the Python interpreter, we write print “Hello World” to a ﬁle with a .py

CHAPTER 1: Introduction

extension. To interpreter this new script, we invoke the Python interpreter

followed by the name of the newly created script.

programmer# echo print \"Hello World\" > hello.py

programmer# python hello.py

Hello World

Additionally, Python provides interactive capability. A programmer can invoke

the Python interpreter and interact with the interpreter directly. To start the

interpreter, the programmer executes python with no arguments. Next, the inter-

preter presents the programmer with a >>> prompt, indicating it can accept a

command. Here, the programmer again types print “Hello World.” Upon hitting

return, the Python interactive interpreter immediately executes the statement.

programmer# python

Python 2.6.5 (r265:79063, Apr 16 2010, 13:57:41)

[GCC 4.4.3] on linux2

>>>

>>> print "Hello World"

Hello World

To initially understand some of the semantics behind the language, this chapter

occasionally utilizes the interactive capability of the Python interpreter. You

can spot the interactive interpreter in usage by looking for the >>> prompt in

the examples.

As we explain the Python examples in the following chapters, we will build our

scripts out of several functional blocks of code known as methods or functions.

As we ﬁnalize each script, we will show how to reassemble these methods and

invoke them from the main() method. Trying to run a script that just contains the

isolated function deﬁnitions without a call to invoke them will prove unhelpful.

For the most part, you can spot the completed scripts because they will have a

main() function deﬁned. Before we start writing our ﬁrst program though, we

will illustrate several of the key components of the Python standard library.

THE PYTHON LANGUAGE

In the following pages, we will tackle the idea of variables, data types, strings,

complex data structures, networking, selection, iteration, ﬁle handling,

exception handling, and interoperability with the operating system. To illustrate

this, we will build a simple vulnerability scanner that connects to a TCP socket,

reads the banner from a service, and compares that banner against known vul-

nerable service versions. As an experienced programmer, you may ﬁnd some

剩余269页未读，继续阅读

weixin_42075047

粉丝: 1
资源: 30

Python黑客攻击指南：自动化网络渗透与取证技术

Asterisk Hacking(syngress安全图书)

Syngress.Reverse.Engineering.Code.with.IDA.Pro.Feb.2008.pdf

Awesome_mixins-0.4-py2-none-any.whl.zip

小契约（交友互动小程序源码）.zip

服装图像检索-基于深度特征+基于内容的服装图像检索算法-附项目源码-优质项目实战.zip

2024-2030中国大肠杆菌在线分析仪市场现状研究分析与发展前景预测报告 Sample zxk.pdf

avatar_utils-1.0.1-py3-none-any.whl.zip

毕业设计基于Spring Cloud微服务架构的AI生成式网站的设计与实现

Axelrod-2.2.0-py2.py3-none-any.whl.zip

智能优化算法-海洋捕食者算法（MPA）（附源码）

最新资源