Black Hat Go: Go Programming for Hackers and Pentesters (Paperback)
暫譯: 黑帽 Go:駭客與滲透測試者的 Go 程式設計

Steele, Tom, Patten, Chris, Kottmann, Dan

買這商品的人也買了...

相關主題

商品描述

Like the best-selling Black Hat Python, Black Hat Go explores the darker side of the popular Go programming language. This collection of short scripts will help you test your systems, build and automate tools to fit your needs, and improve your offensive security skillset.

Black Hat Go explores the darker side of Go, the popular programming language revered by hackers for its simplicity, efficiency, and reliability. It provides an arsenal of practical tactics from the perspective of security practitioners and hackers to help you test your systems, build and automate tools to fit your needs, and improve your offensive security skillset, all using the power of Go.

You'll begin your journey with a basic overview of Go's syntax and philosophy and then start to explore examples that you can leverage for tool development, including common network protocols like HTTP, DNS, and SMB. You'll then dig into various tactics and problems that penetration testers encounter, addressing things like data pilfering, packet sniffing, and exploit development. You'll create dynamic, pluggable tools before diving into cryptography, attacking Microsoft Windows, and implementing steganography.

You'll learn how to:
- Make performant tools that can be used for your own security projects
- Create usable tools that interact with remote APIs
- Scrape arbitrary HTML data
- Use Go's standard package, net/http, for building HTTP servers
- Write your own DNS server and proxy
- Use DNS tunneling to establish a C2 channel out of a restrictive network
- Create a vulnerability fuzzer to discover an application's security weaknesses
- Use plug-ins and extensions to future-proof productsBuild an RC2 symmetric-key brute-forcer
- Implant data within a Portable Network Graphics (PNG) image.

Are you ready to add to your arsenal of security tools? Then let's Go

商品描述(中文翻譯)

與暢銷書 Black Hat Python 一樣,Black Hat Go 探索了流行的 Go 程式語言的陰暗面。這本短腳本集將幫助您測試系統,構建和自動化符合您需求的工具,並提升您的攻擊性安全技能。

Black Hat Go 探索了 Go 的陰暗面,這是一種因其簡單性、高效性和可靠性而受到駭客推崇的流行程式語言。它提供了一系列實用的策略,從安全實踐者和駭客的角度出發,幫助您測試系統,構建和自動化符合您需求的工具,並提升您的攻擊性安全技能,所有這些都利用了 Go 的強大功能。

您將從 Go 的語法和哲學的基本概述開始您的旅程,然後開始探索可以用於工具開發的範例,包括常見的網路協議,如 HTTP、DNS 和 SMB。接著,您將深入研究滲透測試者所遇到的各種策略和問題,處理數據竊取、封包嗅探和漏洞開發等問題。您將創建動態的、可插拔的工具,然後深入研究密碼學、攻擊 Microsoft Windows 和實現隱寫術。

您將學會如何:


- 創建高效的工具,可用於您自己的安全專案

- 創建可用的工具,與遠端 API 互動

- 擷取任意 HTML 數據

- 使用 Go 的標準套件 net/http 來構建 HTTP 伺服器

- 編寫自己的 DNS 伺服器和代理

- 使用 DNS 隧道在限制性網路中建立 C2 通道

- 創建漏洞模糊測試器以發現應用程式的安全弱點

- 使用插件和擴展來未來證明產品

- 建立一個 RC2 對稱密鑰暴力破解器

- 在可攜式網路圖形 (PNG) 圖像中植入數據。

您準備好增加您的安全工具庫了嗎?那麼讓我們開始 Go 吧!

作者簡介

Tom Steele, Dan Kottmann, and Chris Patten share over 30 years in penetration testing and offensive security experience, and have delivered multiple Go training and development sessions.

作者簡介(中文翻譯)

Tom SteeleDan KottmannChris Patten 擁有超過 30 年的滲透測試和攻擊性安全經驗,並且已經舉辦了多場 Go 語言的培訓和開發課程。