EH-Net

Ethical Hacking Discussions and Related Certifications => Programming => Topic started by: pjayes on May 28, 2008, 02:21:06 PM



Title: What programing language is a more valuable when it comes to pen testing?
Post by: pjayes on May 28, 2008, 02:21:06 PM
In my quest to start learning programing , i need to figure out which language will help me the most in the security field?

Thanks
pjayes


Title: Re: What programing language is a more valuable when it comes to pen testing?
Post by: pjayes on May 28, 2008, 02:34:03 PM
this is a great site for anyone interested in learning perl http://wwwacs.gantep.edu.tr/docs/perl-ebook/



Title: Re: What programing language is a more valuable when it comes to pen testing?
Post by: Negrita on May 28, 2008, 03:10:06 PM
this is a great site for anyone interested in learning perl

This one is even better. (http://www.cpan.org/)  ;)

BTW, I think that the original Teach Yourself Perl in 21 Days is this copy here (http://www.amazon.com/Sams-Teach-Yourself-Perl-Days/dp/0672320355) by Laura Lemay, though I may be mistaken. I am presently working through this book (I'm on chapter 8 at the moment) which I borrowed from the book library at my work. It was recomended to me by a regular Perl  developer, and so far has been well worth the effort.

Sometimes I get the feeling that I would be better of with the Camel Book (http://www.amazon.com/Programming-Perl-3rd-Larry-Wall/dp/0596000278) or the Llama Book (http://www.amazon.com/Learning-Perl-Second-Randal-Schwartz/dp/B00005R09A/ref=pd_sim_b_img_1), but until now I've decided to stick it out with Laura Lemay.


Title: Re: What programing language is a more valuable when it comes to pen testing?
Post by: Negrita on May 28, 2008, 03:35:27 PM
BTW, to answer your original question, we used to have a poll (http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,1027.0/) here for just that question. Unfortunately the results can only be seen by Don now.  :(

If I remember correctly Perl/Python/PHP took fist place with C/C++/C# in close second place. Perhaps Don can publish the exact final results here if he still has them.


Title: Re: What programing language is a more valuable when it comes to pen testing?
Post by: shakuni on May 28, 2008, 04:02:55 PM
Quote
In my quest to start learning programing , i need to figure out which language will help me the most in the security field?
From pentesting perspective, python/perl are more important than C/C++ because you have to sometimes write quick-and-dirty scripts on the spot to exploit the situation.

On the other hand from overall security perspective C/C++ are very important for many reasons like modifying existing tools, writing new tools, writing exploits, shellcode etc.

So here's my suggestion,
Learn 'em all (C,C++,perl,python). ;)


Title: Re: What programing language is a more valuable when it comes to pen testing?
Post by: geekyone on May 28, 2008, 04:49:52 PM
I am reading the Camel book right now and so far I would highly recommend it.

Also a quick question regarding the "Learn 'em all" strategy I was wondering if it is really necessary to learn both Python and Perl?  Or do you think it is good enough to just pick one and go with it?  I do see a benefit in learning both C and C++ but Python and Perl seem so similar that I am finding it hard to justify in my mind learning both.  Although this is from a newbie perspective of Perl and Python programming so maybe I am missing something.


Title: Re: What programing language is a more valuable when it comes to pen testing?
Post by: nebu10uz on May 28, 2008, 09:57:39 PM
As for me I'm currently focusing on Python and C/C++. These are the two languages I really want to get good at.

Want to learn these language the hacker way, I recommend the following book for creating security tools in C:

Programming Linux Hacker Tools Uncovered (http://www.amazon.com/Programming-Linux-Hacker-Tools-Uncovered/dp/19317)

And this book will be coming out in September for Python:

Grey Hat Python: Python Programming for Hackers and Reverse Engineers (http://www.amazon.com/Grey-Hat-Python-Programming-Engineers/dp/0470384492/ref=wl_it_dp?ie=UTF8&coliid=I2R4LWXBFNUFX3&colid=2AMX2G36DHUHV)


Title: Re: What programing language is a more valuable when it comes to pen testing?
Post by: don on May 28, 2008, 10:55:31 PM
Great find in Grey Hat Python. How about this one:

Python Programming for the Absolute Beginner, Second Edition (http://www.amazon.com/gp/redirect.html?ie=UTF8&location=http%3A%2F%2Fwww.amazon.com%2FPython-Programming-Absolute-Beginner-Second%2Fdp%2F1598631128%2F&tag=thedigitalcon-20&linkCode=ur2&camp=1789&creative=9325)

Don


Title: Re: What programing language is a more valuable when it comes to pen testing?
Post by: nebu10uz on May 28, 2008, 11:22:10 PM

Nice!



Title: Re: What programing language is a more valuable when it comes to pen testing?
Post by: pjayes on May 29, 2008, 06:47:14 AM
Hey Negrita, awsome link. i must have been on that site for 3 or 4 hours

Thanks
pjayes


Title: Re: What programing language is a more valuable when it comes to pen testing?
Post by: Kev on May 29, 2008, 04:24:40 PM
Great link Negrita. Yes Don thats a good book. It teaches you how to make a computer game from ground up. Thats handy because getting people to download a game from you with a trojan wrapped is about the easiest thing to do as far as social engineering goes. If you can get them to do it and their AV doesn't catch it, you are in!  Browser exploits are nice but the browser has to be vulnerable. So I encourage any serious hacker to get those programming skillz!