Violent Python : a cookbook for hackers, forensic analysts, penetration testers and security engineers

289 Pages·2013·5.95 MB·English

by  T J O'Connor

Violent Python
A Cookbook for Hackers,
Forensic Analysts,
Penetration Testers and
Security Engineers
This page is intentionally left blank
Violent Python
A Cookbook for Hackers,
Forensic Analysts,
Penetration Testers and
Security Engineers
TJ. O’Connor
AMSTERDAM • BOSTON • HEIDELBERG • LONDON
NEW YORK • OXFORD • PARIS • SAN DIEGO
SAN FRANCISCO • SINGAPORE • SYDNEY • TOKYO
Syngress is an Imprint of Elsevier
Acquiring Editor: Chris Katsaropoulos
Development Editor: Meagan White
Project Manager: Priya Kumaraguruparan
Designer: Russell Purdy
Syngress is an imprint of Elsevier
225 Wyman Street, Waltham, MA 02451, USA
Copyright © 2013 Elsevier, Inc. All rights reserved.
No part of this publication may be reproduced or transmitted in any form or by any means,
electronic or mechanical, including photocopying, recording, or any information storage and
retrieval system, without permission in writing from the publisher. Details on how to seek
permission, further information about the Publisher’s permissions policies and our arrange-
ments with organizations such as the Copyright Clearance Center and the Copyright Licensing
Agency, can be found at our website: www.elsevier.com/permissions.
This book and the individual contributions contained in it are protected under copyright by the
Publisher (other than as may be noted herein).
Notices
Knowledge and best practice in this field are constantly changing. As new research and experi-
ence broaden our understanding, changes in research methods or professional practices, may
become necessary. Practitioners and researchers must always rely on their own experience and
knowledge in evaluating and using any information or methods described herein. In using such
information or methods they should be mindful of their own safety and the safety of others,
including parties for whom they have a professional responsibility.
To the fullest extent of the law, neither the Publisher nor the authors, contributors, or editors,
assume any liability for any injury and/or damage to persons or property as a matter of p roducts
liability, negligence or otherwise, or from any use or operation of any methods, products,
instructions, or ideas contained in the material herein.
Library of Congress Cataloging-in-Publication Data
Application submitted
British Library Cataloguing-in-Publication Data
A catalogue record for this book is available from the British Library.
ISBN: 978-1-59749-957-6
Printed in the United States of America
13 14 15 10 9 8 7 6 5 4 3 2 1
For information on all Syngress publications visit our website at www.syngress.com
Trademarks
Elsevier, Inc., the author(s), and any person or firm involved in the writing,
editing, or production (collectively “Makers”) of this book (“the Work”) do
not guarantee or warrant the results to be obtained from the Work.
There is no guarantee of any kind, expressed or implied, regarding the Work or
its contents. The Work is sold AS IS and WITHOUT WARRANTY. You may have
other legal rights, which vary from state to state.
In no event will Makers be liable to you for damages, including any loss of
profits, lost savings, or other incidental or consequential damages arising out
from the Work or its contents. Because some states do not allow the exclusion
or limitation of liability for consequential or incidental damages, the above
limitation may not apply to you.
You should always use reasonable care, including backup and other appropri-
ate precautions, when working with computers, networks, data, and files.
Syngress Media®, Syngress®, “Career Advancement Through Skill Enhance-
ment®,” “Ask the Author UPDATE®,” and “Hack Proofing®,” are registered
trademarks of Elsevier, Inc.“Syngress:The Definition of a Serious Security
Library”TM, “Mission CriticalTM,” and “The Only Way to Stop a Hacker is to
Think Like OneTM” are trademarks of Elsevier, Inc. Brands and product names
mentioned in this book are trademarks or service marks of their respective
companies.
v
This page is intentionally left blank
Acknowledgements
In military slang, “watching your six” literally means keeping a look out behind
you. While a patrol leader presses forward in the twelve o’clock direction, at
least one of his teammates walks backward scouting the six o’clock position
for dangers that the patrol leader cannot see. When I first approached my men-
tor about writing a book, he warned me that I could only do this if I had team
members committed to watching my six. I pondered about those in my life
that this massive endeavor would affect. Three seconds later, I knew that they
were all strong enough.
To my technical editor, Mark Baggett, your endless technical revisions pro-
tected this book. To Dr. Reeves, Dr. Freeh, Dr. Jacoby, and Dr. Blair—thank you
for picking up a young and angry army officer years ago and turning me into
a non-traditional academic, capable of writing a book. To Dr. Fanelli, thank
you for teaching me not to think outside of the box, but to rather use the
box as a stepping stool to crawl out of the basement. To Dr. Conti, thank you
for precisely manipulating me into Law 28. To my former students, especially
the ninja collective of Alan, Alex, Arod, Chris, Christina, Duncan, Gremlin,
Jim, James, Kevin, Rob, Steven, Sal and Topher—your creativity continues to
inspire me.
To Rob Frost, thank you for writing a much more powerful chapter on web
reconnaissance than I ever could. To Matt, Ryan, Kirk, Mark, Bryan, and Bill —
thank you for understanding why I didn’t sleep the night before, and for
watch ing positions 1 through 12. To my loving wife, my monkey and my
ninja princess—thank you for providing me with your unconditional love,
understanding, and support throughout this endeavor. To my parents, thank
you for teaching me to value education. And to Dr. Cook—tank on, brother.
vii
This page is intentionally left blank
Dedication
For my monkey and my ninja princess: anything is
possible if you try hard enough.
ix