Violent Python: Python in The Dark Side: Darkx Pycon - TW 2013

This document discusses using Python for hacking and security purposes. It begins by introducing the speaker and their interest in free software and information security. It then highlights some of Python's advantages like being easy to learn, cross-platform, and having many libraries. The document recommends Python as a good first language for hacking due to its power and flexibility. It provides examples of using Python APIs and tools for socket programming, interacting with C code, hacking Skype databases, password cracking, network scanning, and more. The speaker was inspired by other presentations and books on using Python for security and reverse engineering.

Uploaded by

Mauri Del Carmen Martinez de la Cruz

Available Formats

Download as PDF, TXT or read online on Scribd

0% found this document useful (0 votes)

67 views

Violent Python: Python in The Dark Side: Darkx Pycon - TW 2013

Uploaded by

Mauri Del Carmen Martinez de la Cruz

Available Formats

Download as PDF, TXT or read online on Scribd

You are on page 1/ 21

Violent Python:

Python in the dark side

darkx
PyCON.tw 2013
About
● a.k.a. xatier
● 平凡無奇的大學生
● 喜好自由軟體和資訊安全技術
● Python 只是輔助 (?)
工商服務
晚點 BoF 八號場地
強者我學長 Dr. Ken 大大

●
講題『 Mining Interest Topics from
Plurk by using Python 』
最常拿 Python 來 ...
We Love Python
● Easy to Learn
● Easy to Read

● Easy to Hack (?)

● Cross platform
● Builtin tools

● Libraries
“This (Programming), of course, is the
fundamental hacking skill. If you don't know any
computer languages, I recommend starting with
Python. It is cleanly designed, well documented,
and relatively kind to beginners. Despite being a
good first language, it is not just a toy; it is very
powerful and flexible and well suited for large
projects. ”

– How to become a hacker (ESR)

(compare to C) ….. “With today's machines
as powerful as they are, this is usually a bad
tradeoff — it's smarter to use a language that
uses the machine's time less efficiently, but your
time much more efficiently. Thus, Python.”

– How to become a hacker (ESR)

小試身手
decrypt
decrypt
import crypt

crypt.crypt(word, salt) -> string

word will usually be a user's password. salt is a 2-
character string
which will be used to select one of 4096 variations of
DES. The characters
in salt must be either ".", "/", or an alphanumeric
character. Returns
the hashed password as a string, which will be
composed of characters from
the same alphabet as the salt.
decrypt
● Dictionary Attack
● /usr/share/dict/words
● GGvxb.e7YgnIg
decrypt
decrypt
Brute force
● http://pvanhoof.be/files/bruteforce.c

● import itertools
Brute force
● http://pvanhoof.be/files/bruteforce.c

● import itertools
Z
APIs
● socket API 跟 C 用起來幾乎一模一樣
● ctypes 標準庫提供 C/dll/so 跨接的橋樑
● 物件、流程控制等可省下更多時間
Hacking Skype
● main.db
● 你想要的通通都在這邊（？
● 聯絡人、聊天紀錄 ... 等

● Unix like 系統很棒的

Lots of tools
●
http://www.dirk-loss.de/python-tools.htm

scapy
dpkt
Immunity Debugger
IDAPython
Lldb (llvm's debugger)
…...
python-nmap
● http://xael.org/norman/python/python-nmap/
● Nmap 工具的 Python binding
● 搭配 IPython shell 一同服用
● GPL licensed
Inspired by
● Nicolle Neulist: Write your own tools with
python! Derbycon2012