[Python] Questions

[powerkickeR]

Oh wow, I hadn't realized this topic was still going on, thanks for all the replies guys!

@Area_13
 Why do you say Python is the worst for this?

@Python
 Recommend any good books about that subject? I personally love reading, so I don't mind if it's a big book.

Btw, what do you guys think about this guy's post?
http://evilzone.org/tutorials/getting-into-the-hacker-mindset/msg7106/#msg7106

[FuyuKitsune]

Why do you say Python is the worst for this?

It's not that bad. It's fine for developing exploits and small local things. The problem is that it's very high-level, there's lots of stuff going in the background, which makes code slow and large files/EXEs. It's designed for high-level scripting and sharing libraries, not for compact exploits (although it can do it, kinda).

Btw, what do you guys think about this guy's post?
http://evilzone.org/tutorials/getting-into-the-hacker-mindset/msg7106/#msg7106

Nice post. Lots to talk about there but it's good.

[powerkickeR]

Hmm, I see.

So what language do you suggest for developing quick/large exploits?

Also, do you have any tips on finding vulnerabilities in networks/websites? I think I want to lean more into 802.11 pen testing, just general stuff in that 'network' genre.

[FuyuKitsune]

C or Delphi are often used for exploits. Of course you'll need to know ASM for finding the exploits. C is a bit more difficult than Delphi. Delphi is good and compiles to remarkably small and fast code.
If you already know some scripting languages then find the exploit using that, then write the payloads in C or Delphi or whatever gives you small enough code.

Sorry, no networking tips.

[xzid]

stick with python.. compiled langs are for a different thing entirely(btw use C, don't bother with anything else, C is god to all).

http://www.cs.wright.edu/~pmateti/InternetSecurity/Lectures/WirelessHacks/Mateti-WirelessHacks.htm

[powerkickeR]

C or Delphi are often used for exploits. Of course you'll need to know ASM for finding the exploits. C is a bit more difficult than Delphi. Delphi is good and compiles to remarkably small and fast code.
If you already know some scripting languages then find the exploit using that, then write the payloads in C or Delphi or whatever gives you small enough code.

Sorry, no networking tips.

Dang, ASM is rather confusing lol. Any suggestions on books?

stick with python.. compiled langs are for a different thing entirely(btw use C, don't bother with anything else, C is god to all).

http://www.cs.wright.edu/~pmateti/InternetSecurity/Lectures/WirelessHacks/Mateti-WirelessHacks.htm

Why do you say C is so good? :O.

[Kulverstukas]

Because you can make anything run with it. Operating Systems are written in C. BIOS'es most likely are written in C+ASM. Do you get my point?

[FuyuKitsune]

A book for C, ASM, and exploit writing all in one is Hacking - The Art of Exploitation (2nd edition). That should be easy to find on Google. There's a CD that goes along with the book. It's just a modified Ubuntu with a few tools. Come to think of it, there's also a little about network vulnerabilities in the book too.

[powerkickeR]

@Kulverstukas:
 Alright I understand what your saying. Mind sharing any experiences with C? Like learning, or what kind of exploits you've written, perhaps?

@FuyuKitsune:
  Oh, I've heard of that book, I'll make sure to check it out! Thanks a lot.

Edit: I'm interested in learning Java, as it looks rather fun to learn. Do you guys find it useful?

[FuyuKitsune]

I haven't used Java but I'll be learning that in a few months. I doubt it will be useful for security/hacking but it should be good developing regular programs.

[Stackprotector]

Windows Assembly Language Primer For Hackers: http://www.securitytube.net/groups?operation=view&groupId=6    9 parts. worth watching in my opinion, there is also a megaprimer on Assembly Languagefor Linux   so if you think watching is a better fit for you, go go go go!

[flowjob]

@Factionwars
Thanks for the link,have been searching for something like that a few days now. I would have never expected to find a tutorial link at this topic. Was worth checking it 



@Hacking with Python
I think hacking with Python is a bad idea because...
Firstly I have been trying to learn hacking with Python 2 years now, and all I have learned was FTP/email Brute Force attacks (and I found the way to do that on myown, not on a page...). Secondly like FuyuKitsune said that you haven't control of what Python is doing (e.g. the background-work) and it uses a lot of main-storage too.

I agree with xzid that C would be a good language because it's hardware near and you have full control of what the program is doing.

Assembly,like Factionwars said, is also a good language because it's even more hardware near than C and even faster too, but it's very complicated and takes much more time to write and learn, and it's even harder than in C to make it work on various platforms.


So I would recommend you to learn C,because it's fast and hardware near, but does not consume as much time as Assebly would.

[Stackprotector]

@Factionwars
Thanks for the link,have been searching for something like that a few days now. I would have never expected to find a tutorial link at this topic. Was worth checking it 



@Hacking with Python
I think hacking with Python is a bad idea because...
Firstly I have been trying to learn hacking with Python 2 years now, and all I have learned was FTP/email Brute Force attacks (and I found the way to do that on myown, not on a page...). Secondly like FuyuKitsune said that you haven't control of what Python is doing (e.g. the background-work) and it uses a lot of main-storage too.

I agree with xzid that C would be a good language because it's hardware near and you have full control of what the program is doing.

Assembly,like Factionwars said, is also a good language because it's even more hardware near than C and even faster too, but it's very complicated and takes much more time to write and learn, and it's even harder than in C to make it work on various platforms.


So I would recommend you to learn C,because it's fast and hardware near, but does not consume as much time as Assebly would.

Python is a fast development language for hacking,  read gray hat python, and it will uncover the true power of importing c libary's in python ,   building your own debugger, dll injection etc.etc.

[Kulverstukas]

@powerkickeR:
Sorry, I don't do C.