|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/binary-exploits-with-python/
课程评论：没有评论
**课程名称：** Python 二进制漏洞利用 **课程概述：** 本课程旨在提升渗透测试人员的能力，使其不仅能熟练使用现有工具，更能独立开发自己的漏洞利用代码。Python 因其简洁易用且功能强大的特性，成为渗透测试的首选语言。 课程从最简单的代码注入（高层代码注入）讲起，逐步深入到二进制漏洞利用，让您学会如何绕过密码或产品密钥验证等不必要代码，并植入特洛伊木马。您将完整体验漏洞利用的开发过程：**发现漏洞、使用调试器分析崩溃、编写恶意攻击代码，最终在 Windows 和 Linux 系统上实现远程代码执行。** 课程将指导您使用 **gdb 调试器分析 Linux 可执行文件并利用 Python 进行攻击**。在 Windows 环境下，您将使用 **Immunity Debugger 和 Python**。 **讲师介绍：** Sam Bowne 自 2000 年起在旧金山城市学院教授计算机网络和安全课程。他曾在 DEFCON、HOPE、B-Sides SF、B-Sides LV、BayThreat、LayerOne、Toorcon 等众多安全会议和学校进行演讲和实践培训。 **讲师资质：** 博士学位、CISSP 认证、DEF CON 黑牌联合获奖者。
A penetration tester who only knows how to use tools written by others is limited to old techniques. Learning to develop your own exploits will make you much more powerful. Python is the favorite choice for penetration testers because it combines simplicity and ease of use with advanced features.This video course starts with high-level code injection, the simplest sort of exploit. It then explains binary exploits that allow you to skip past unwanted code, such as the password or product key tests, and add Trojan code. You will perform the exploit development process: finding a vulnerability, analyzing a crash in a debugger, creating a crafted attack, and achieving remote code execution on Windows and Linux. You will use the gdb debugger to analyze Linux executables and Python code to exploit them. On Windows, you'll use the Immunity debugger and Python.About the AuthorSam Bowne has been teaching computer networking and security classes at City College San Francisco since 2000. He has given talks and hands-on trainings at DEFCON, HOPE, B-Sides SF, B-Sides LV, BayThreat, LayerOne, Toorcon, and many other schools and conferences. Credentials: PhD, CISSP, DEF CON Black-Badge Co-Winner
