Book Image

Python for Offensive PenTest

By : Hussam Khrais
Book Image

Python for Offensive PenTest

By: Hussam Khrais

Overview of this book

Python is an easy-to-learn and cross-platform programming language that has unlimited third-party libraries. Plenty of open source hacking tools are written in Python, which can be easily integrated within your script. This book is packed with step-by-step instructions and working examples to make you a skilled penetration tester. It is divided into clear bite-sized chunks, so you can learn at your own pace and focus on the areas of most interest to you. This book will teach you how to code a reverse shell and build an anonymous shell. You will also learn how to hack passwords and perform a privilege escalation on Windows with practical examples. You will set up your own virtual hacking environment in VirtualBox, which will help you run multiple operating systems for your testing environment. By the end of this book, you will have learned how to code your own scripts and mastered ethical hacking from scratch.
Table of Contents (13 chapters)
Title Page
Copyright and Credits
Packt Upsell
Contributors
Preface
Index

Hijacking KeePass password manager


If you have ever worked with network engineers or system administrators who work on multiple devices, then you have probably come across a password manager, simply because remembering each password is impossible for them. Usually, they use a password manager to securely store device credentials.

In this section, we will use a very common cross-platform software called KeePass and we will see how we can hijack passwords with the help of this software. You can download and install the software from https://keepass.info/download.html. After installing: 

  1. Create a NewDatabase by clicking on the New icon. 
  2. Define Master password and click on OK.
  1. Next, click on eMail and create a new account or a new entry for the gmail account by right-clicking and selecting the Add Entry... option. 
  1. Now, let's create a new entry for the PayPal account. Click on Homebanking, then right-click and select the Add Entry... option.
  1. So, let's log in and see whether we can use the password...