You're Reading a Free Preview
Pages 5 to 19 are not shown in this preview.
Pages 5 to 19 are not shown in this preview.
You're Reading a Free Preview
Pages 24 to 119 are not shown in this preview.
Pages 24 to 119 are not shown in this preview.
You're Reading a Free Preview
Page 124 is not shown in this preview.
Page 124 is not shown in this preview.
You're Reading a Free Preview
Pages 129 to 184 are not shown in this preview.
Pages 129 to 184 are not shown in this preview.
You're Reading a Free Preview
Pages 189 to 220 are not shown in this preview.
Pages 189 to 220 are not shown in this preview.
of 00
Gray Hat Python
Python is fast becoming the programming language of choice for hackers, reverse engineers, and software testers because it's easy to write quickly, and it has the low-level supp...
(More)
9,761 Reads
Info and Rating
| Category: | |
| Rating: | (5 Ratings) |
| Upload Date: | 08/01/2009 |
| Copyright: | Traditional Copyright: All rights reserved |
| Tags: |
This is a Free Preview
With this purchase, you can read the entire document on Scribd, download (as PDF), and print.
List Price: $39.95
Save 20%!
TIP Press Ctrl-F⌘F to quickly search anywhere in the document.
Search History:
Result 00 of 00
00 results for result for
p.
Sections
- SETTING UP YOUR DEVELOPMENTENVIRONMENT
- 1.1Operating System Requirements
- 1.2Obtaining and Installing Python 2.5
- 1.2.1Installing Python on Windows
- 1.2.2Installing Python for Linux
- 1.3Setting Up Eclipse and PyDev
- 1.3.1The Hacker’s Best Friend: ctypes
- 1.3.2Using Dynamic Libraries
- 1.3.3Constructing C Datatypes
- 1.3.4Passing Parameters by Reference
- 1.3.5Defining Structures and Unions
- DEBUGGERS AND DEBUGGERDESIGN
- 2.1General-Purpose CPU Registers
- 2.2The Stack
- 2.4.1Soft Breakpoints
- 2.4.2Hardware Breakpoints
- 2.4.3Memory Breakpoints
- BUILDING A WINDOWSDEBUGGER
- 3.1Debuggee, Where Art Thou?
- 3.2Obtaining CPU Register State
- 3.2.1Thread Enumeration
- 3.2.2Putting It All Together
- 3.3Implementing Debug Event Handlers
- 3.4The Almighty Breakpoint
- 3.4.1Soft Breakpoints
- 3.4.2Hardware Breakpoints
- 3.4.3Memory Breakpoints
- 3.5Conclusion
- PYDBG—A PURE PYTHON WINDOWSDEBUGGER
- 4.1Extending Breakpoint Handlers
- 4.2Access Violation Handlers
- 4.3Process Snapshots
- 4.3.1Obtaining Process Snapshots
- 4.3.2Putting It All Together
- IMMUNITY DEBUGGER— THEBEST OF BOTH WORLDS
- 5.1Installing Immunity Debugger
- 5.2Immunity Debugger 101
- 5.2.1PyCommands
- 5.2.2PyHooks
- 5.3Exploit Development
- 5.3.1Finding Exploit-Friendly Instructions
- 5.3.2Bad-Character Filtering
- 5.3.3Bypassing DEP on Windows
- 5.4Defeating Anti-Debugging Routines in Malware
- 5.4.1IsDebuggerPresent
- 5.4.2Defeating Process Iteration
- HOOKING
- 6.1Soft Hooking with PyDbg
- 6.2Hard Hooking with Immunity Debugger
- DLL AND CODE INJECTION
- 7.1Remote Thread Creation
- 7.1.1DLL Injection
- 7.1.2Code Injection
- 7.2.1File Hiding
- 7.2.2Coding the Backdoor
- 7.2.3Compiling with py2exe
- FUZZING
- 8.1.1Buffer Overflows
- 8.1.2Integer Overflows
- 8.1.3Format String Attacks
- 8.3Future Considerations
- 8.3.2Automated Static Analysis
- SULLEY
- 9.1Sulley Installation
- 9.2Sulley Primitives
- 9.2.1Strings
- 9.2.2Delimiters
- 9.2.3Static and Random Primitives
- 9.2.4Binary Data
- 9.2.5Integers
- 9.2.6Blocks and Groups
- 9.3Slaying WarFTPD with Sulley
- 9.3.1FTP 101
- 9.3.2Creating the FTP Protocol Skeleton
- 9.3.3Sulley Sessions
- 9.3.4Network and Process Monitoring
- 9.3.5Fuzzing and the Sulley Web Interface
- FUZZING WINDOWS DRIVERS
- 10.1Driver Communication
- 10.2Driver Fuzzing with Immunity Debugger
- 10.3Driverlib—The Static Analysis Tool for Drivers
- 10.3.1Discovering Device Names
- 10.3.2Finding the IOCTL Dispatch Routine
- 10.3.3Determining Supported IOCTL Codes
- 10.4Building a Driver Fuzzer
- 11.1IDAPython Installation
- 11.2IDAPython Functions
- 11.2.1Utility Functions
- 11.2.2Segments
- 11.2.3Functions
- 11.2.4Cross-References
- 11.2.5Debugger Hooks
- 11.3Example Scripts
- 11.3.1Finding Dangerous Function Cross-References
- 11.3.2Function Code Coverage
- 11.3.3Calculating Stack Size
- 12.1Installing PyEmu
- 12.2PyEmu Overview
- 12.2.4Execution
- 12.2.6Handlers
- 12.3IDAPyEmu
- 12.3.1Function Emulation
- 12.3.2PEPyEmu
- 12.3.3Executable Packers
- 12.3.4UPX Packer
- INDEX
More From This User
Related Documents
More From This User
The Book of FileMaker 6
The Book of FileMaker 6 is a complete reference to the FileMaker Pro product ...
The Manga Guide to Molecular Biology (Excerpt)
Rin and Ami have been skipping molecular biology class all semester, and Prof...
The Manga Guide to Calculus (Excerpt)
Noriko is just getting started as a junior reporter for the Asagake Times. Sh...
Wicked Cool Ruby Scripts
Are you spending valuable time on work a well-trained monkey could do? If so,...
How to Be a Geek Goddess
When it comes to technology (or anything, really), men and women rarely think...
Cisco Routers for the Desperate, 2nd Edition
Cisco routers and switches are the cornerstones of many networks. But when th...
Network Know-How
Are the machines in your office living isolated lives? Do you have a few comp...
Growing Software
As the technology leader at a small software company, you need to focus on pe...
The Blender GameKit, 2nd Edition
Blender is the first of the 3D packages to integrate a game engine as well as...
Gray Hat Python
Python is fast becoming the programming language of choice for hackers, rever...
The Google Way
Shortly after World War I, Ford and GM created the large modern corporation, ...
The Book of IMAP: Building a Mail Server with Courier and Cyrus
IMAP (the Internet Message Access Protocol) allows clients to access their em...
Art of Debugging with GDB, DDD, and Eclipse
Debugging is crucial to successful software development, but even many experi...
The Book of Postfix: State-of-the-Art Message Transport
Developed with security and speed in mind, Postfix has become a popular alter...
The Manga Guide to Physics (Excerpt)
Megumi is an all-star athlete, but she's a failure when it comes to physics c...
The Book of PF - A No-Nonsense Guide to the OpenBSD Firewall
OpenBSD's stateful packet filter, PF, offers an amazing feature set and suppo...
The Manga Guide to Electricity (excerpt)
Rereko is just your average high-school girl from Electopia, the land of elec...
The Manga Guide to Databases (excerpt)
Want to learn about databases without the tedium? With its unique combination...
Related Docuements
Phrack Magazine issue 63
Phrack Magazine from phrack.org . For the text version it's best to get it fr...
From jmuzz
Leave a Comment
Checking out Gray Hat Python. I wish the publishers would unhide the ToC!