1 SETTING UP YOUR PYTHON ENVIRONMENT

• Installing Kali Linux
• Setting Up Python
• Installing an IDE
• Code Hygiene

2 BASIC NETWORKING TOOLS

• TCP Client
• UDP Client
• TCP Server
• Replacing Netcat
• Building a TCP Proxy
• SSH with Paramiko
• SSH Tunneling

3 WRITING A SNIFFER

• Python Building a UDP Host Discovery Tool
• Packet Sniffing on Windows and Linux
• Decoding the IP Layer
• • The ctypes Module
  • The struct Module
  • Writing the IP Decoder
• Decoding ICMP

4 OWNING THE NETWORK WITH SCAPY

• Stealing Email Credentials
• ARP Cache Poisoning with Scapy
• PCAP Processing

5 WEB HACKERY

• Using Web Libraries
• The urllib Library for Python 3 .x
• The requests Library
• The lxml and BeautifulSoup Packages
• Mapping Open-Source Web App Installations
• Mapping the WordPress Framework
• Testing the Live Target
• Brute-Forcing Directories and File Locations
• Kicking the Tires
• Brute-Forcing HTML Form Authentication

6 EXTENDING BURP PROXY

• Setting Up
• Burp Fuzzing
• Using Bing for Burp
• Turning Website Content into Password Gold

7 GITHUB COMMAND AND CONTROL

• Setting Up a GitHub Account
• Creating Modules
• Configuring the Trojan
• Building a GitHub-Aware Trojan
• Hacking Python’s import Functionality

8 COMMON TROJANING TASKS ON WINDOWS 127

• Keylogging for Fun and Keystrokes
• Taking Screenshots
• Pythonic Shellcode Execution
• Sandbox Detection

9 FUN WITH EXFILTRATION

• Encrypting and Decrypting Files
• Email Exfiltration
• File Transfer Exfiltration
• Exfiltration via a Web Server
• Putting It All Together

10 WINDOWS PRIVILEGE ESCALATION

• Installing the Prerequisites
• Creating the Vulnerable BlackHat Service
• Creating a Process Monitor
• Process Monitoring with WMI
• Windows Token Privileges
• Winning the Race
• Code Injection

Only a basic understanding of Python is required to participate in the course. Students will be provided with a brief Python language basics tutorial that they can go through on their own prior to starting the course.

HARDWARE

• A laptop with 8GB of RAM capable of running VMWare images provided by the course instructor
• 20GB of free hard disk space

SOFTWARE

• Students will be responsible for installing a Python 3 language environment on their laptop using directions provided by the course instructor
• Students will need to have VMWare workstation (trial version will be fine) in order to run VMWare images produced with the latest version of the software
• Students should have administrative access on their laptop and the ability to disable antivirus and other security software

Karim Nathoo is a freelance computer security consultant providing specialized security services to government, military and private sector clients. Karim has extensive experience in high assurance ethical hacking, incident response and security product evaluation, including the application of binary code analysis and reverse engineering. Karim has delivered professional services for international clients in asia, europe, canada and the united states. Karim has experience ranging from working with r&d teams in cutting edge technical environments to providing executive level risk management briefings and proof of concept demonstrations.

Karim has performed security assurance and engineering engagements for organizations such as apple, microsoft, france telecom, cloakware corporation, creative labs, motorola, verizon, nokia, philips semiconductor, sony bmg, sun microsystems, qnx software systems and numerous canadian and us government agencies.

Specialities: penetration testing, code analysis, reverse engineering, software security evaluation, custom software development, malware analysis, incident response, product evaluation, and security engineering.