Book Image

Python for Offensive PenTest

By : Hussam Khrais
Book Image

Python for Offensive PenTest

By: Hussam Khrais

Overview of this book

Python is an easy-to-learn and cross-platform programming language that has unlimited third-party libraries. Plenty of open source hacking tools are written in Python, which can be easily integrated within your script. This book is packed with step-by-step instructions and working examples to make you a skilled penetration tester. It is divided into clear bite-sized chunks, so you can learn at your own pace and focus on the areas of most interest to you. This book will teach you how to code a reverse shell and build an anonymous shell. You will also learn how to hack passwords and perform a privilege escalation on Windows with practical examples. You will set up your own virtual hacking environment in VirtualBox, which will help you run multiple operating systems for your testing environment. By the end of this book, you will have learned how to code your own scripts and mastered ethical hacking from scratch.
Table of Contents (13 chapters)
Title Page
Copyright and Credits
Packt Upsell

Submitting the recovered password over HTTP session

In this section, we will modify our previous script to automate the submitting of the recovered or hacked password over the HTTP session. And then, we will send it back to the hacker machine, where the end result should be a standalone file, which can be used in post-exploitation or as a function integrated with a new Python shell.

We will start our HTTP server on the Kali machine to receive the hacked password of the target site. We will simply double-click on the Chrome Dumper EXE file. You will see that we were able to have the saved password remotely out of a Chrome database. Here, we grabbed the Facebook email and password, and also the Twitter account. Now, if we move to the target machine, we will see that the following are the two sessions that are currently open on the target site:

Testing the file against antivirus

We will be using the well-known website, VirusTotal, and will upload our Google Dumper file.

For this, navigate to our...