Fully-updated for Python 3, the second edition of this worldwide bestseller (over 100,000 copies sold) explores the stealthier side of programming and brings you all new strategies for your hacking projects.
When it comes to creating powerful and effective hacking tools, Python is the language of choice for most security analysts. In this second edition of the bestselling
Black Hat Python, you’ll explore the darker side of Python’s capabilities: everything from writing network sniffers, stealing email credentials, and bruteforcing directories to crafting mutation fuzzers, investigating virtual machines, and creating stealthy trojans.
All of the code in this edition has been updated to Python 3.x. You’ll also find new coverage of bit shifting, code hygiene, and offensive forensics with the Volatility Framework as well as expanded explanations of the Python libraries ctypes, struct, lxml, and BeautifulSoup, and offensive hacking strategies like splitting bytes, leveraging computer vision libraries, and scraping websites.
You’ll even learn how to:
- Create a trojan command-and-control server using GitHub
- Detect sandboxing and automate common malware tasks like keylogging and screenshotting
- Extend the Burp Suite web-hacking tool
- Escalate Windows privileges with creative process control
- Use offensive memory forensics tricks to retrieve password hashes and find vulnerabilities on a virtual machine
- Abuse Windows COM automation
- Exfiltrate data from a network undetected
When it comes to offensive security, you need to be able to create powerful tools on the fly. Learn how with
Black Hat Python.
Industry Reviews
Another incredible Python book. With a minor tweak or two many of these programs will have at least a ten year shelf life, and that is rare for a security book.
Stephen Northcutt founding president of the SANS Technology Institute
A great book using Python for offensive security purposes.
Andrew Case Volatility core developer and coauthor of The Art of Memory Forensics
If you truly have a hacker's mindset, a spark is all you need to make it your own and do something even more amazing. Justin Seitz offers plenty of sparks.
Ethical Hacker
Whether you're interested in becoming a serious hacker/penetration tester or just want to know how they work, this book is one you need to read. Intense, technically sound, and eye-opening.
Sandra Henry-Stocker, IT World
Definitely a recommended read for the technical security professional with some basic previous exposure to Python.
Richard Austin, IEEE Cipher
A well-written book that will put you on track to being able to write powerful and potentially scary tools. It's up to you to use them for good.
Steve Mansfield-Devine editor of Elsevier's Network Security Newsletter
A well implemented read with lots of good ideas for fun offensive Python projects. So enjoy, and don't forget it's all about the code!
Dan Borges LockBoxx
A useful eye-opener.
MagPi Magazine
