Python for Ethical Hacking

What You’ll Learn 📚

• Core concepts of ethical hacking
• Key terminology and definitions
• Simple to complex Python examples for hacking
• Common questions and troubleshooting tips
• Ethical considerations and best practices

Introduction to Ethical Hacking

Ethical hacking involves testing and evaluating systems to find vulnerabilities before malicious hackers can exploit them. It’s like being a digital detective, finding clues and solving puzzles to keep systems safe. 🕵️‍♂️

Key Terminology

• Vulnerability: A weakness in a system that can be exploited.
• Exploit: A method used to take advantage of a vulnerability.
• Penetration Testing: Simulating cyber attacks to identify vulnerabilities.
• Payload: The part of an exploit that performs the intended action.

Getting Started with Python

Python is a versatile language that’s perfect for ethical hacking due to its simplicity and powerful libraries. Let’s start with the simplest example: a basic port scanner.

import socket

def simple_port_scanner(ip, port):
    try:
        sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        sock.settimeout(1)
        result = sock.connect_ex((ip, port))
        if result == 0:
            print(f"Port {port} is open on {ip}.")
        else:
            print(f"Port {port} is closed on {ip}.")
        sock.close()
    except Exception as e:
        print(f"Error: {e}")

# Example usage
simple_port_scanner('127.0.0.1', 80)

Port 80 is open on 127.0.0.1.

Remember, always have permission before scanning any network or system. Ethical hacking is about protecting, not exploiting!

Progressively Complex Examples

Example 1: Advanced Port Scanner

import socket
from threading import Thread

open_ports = []

def scan_port(ip, port):
    try:
        sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        sock.settimeout(1)
        result = sock.connect_ex((ip, port))
        if result == 0:
            open_ports.append(port)
        sock.close()
    except Exception as e:
        pass

# Scan multiple ports
for port in range(1, 1025):
    thread = Thread(target=scan_port, args=('127.0.0.1', port))
    thread.start()

print(f"Open ports: {open_ports}")

Open ports: [80, 443]

Example 2: Password Cracker

import itertools
import string

def password_cracker(target_password):
    chars = string.ascii_lowercase
    for length in range(1, 5):
        for guess in itertools.product(chars, repeat=length):
            guess = ''.join(guess)
            if guess == target_password:
                return f"Password found: {guess}"
    return "Password not found."

# Example usage
print(password_cracker('abc'))

Password found: abc

Brute-force attacks are resource-intensive and should only be used ethically and legally, with permission.

Example 3: Network Sniffer

from scapy.all import sniff

def packet_callback(packet):
    print(packet.show())

# Sniff packets
sniff(prn=packet_callback, count=10)

###[ Ethernet ]###
  dst= ff:ff:ff:ff:ff:ff
  src= 00:0c:29:68:8e:6e
  type= 0x806
###[ ARP ]###
  hwtype= 0x1
  ptype= 0x800
  hwlen= 6
  plen= 4
  op= who-has
  hwsrc= 00:0c:29:68:8e:6e
  psrc= 192.168.1.2
  hwdst= 00:00:00:00:00:00
  pdst= 192.168.1.1

Ensure you have the necessary permissions to sniff network traffic. Unauthorized sniffing is illegal.

Common Questions and Troubleshooting

1. Why is my port scanner not detecting open ports?

   Check if the target IP is correct and the ports are actually open. Firewalls may block your scans.

2. How can I speed up my port scanner?

   Use threading or asynchronous programming to scan multiple ports concurrently.

3. What should I do if my password cracker is too slow?

   Optimize your code or use more efficient algorithms. Consider the ethical implications of brute-force attacks.

4. Why can’t I sniff packets on my network?

   Ensure you have the necessary permissions and that your network interface is in promiscuous mode.

Ethical Considerations

Ethical hacking is about using your skills to protect and defend. Always have explicit permission before testing systems. Remember, with great power comes great responsibility. 💪

Practice Exercises

• Modify the port scanner to scan a range of IP addresses.
• Create a script that logs open ports to a file.
• Experiment with different password lengths in the password cracker.

Keep practicing and exploring. You’re on your way to becoming an ethical hacking pro! 🚀