October 5, 2011 at 12:55 pm #6877
Does anyone know if there is a repository of exploit code in different languages? Maybe a searchable one?I am (very slowly) trying to learn C++, but i think that im going to come to a point where I need to see it in use in my desired work arena. Anyway, I know most code is written in python/perl, but they seemed a little less readable to me, and the guides seemed written for people who had exp with programming.
October 5, 2011 at 1:07 pm #42506cd1zzParticipant
Like you said, most are written in scripting languages. It also depends on the author. I usually only see C++ when custom Trojans are created, not very often for exploits.
I’m sure you’re already aware of exploit-db.com packetstormsecurity.org osvdb.org and securityfocus.com.
You might want to try some google searches like:
Those bring up a few results…..
October 5, 2011 at 1:37 pm #42507
awesome ideas! Do you think its nessesary to know a language like C++ before learning scripting? Or have a good zero to primer on scripting?
October 5, 2011 at 2:05 pm #42508cd1zzParticipant
Sorta depends on what you’re doing. But if you’re just modifying and writing exploits, I’d start with scripting. I think its 1000 times easier than C++, but that’s just my opinion.
October 5, 2011 at 2:38 pm #42509mambruParticipant
Like cd1zz says, it depends on what you are doing or what you want to achieve. It’s not necessary to learn C/C++ before any scripting language, but definitely it will come handy at some point, so I’d suggest to go for it.
October 5, 2011 at 4:47 pm #42510
hmm. Well lets ask the other side of the question, would learning scripting help me learn traditional programming languages?
And could use a good primer for python, from a real dummy, basic view.
October 5, 2011 at 6:13 pm #42511mambruParticipant
I think learning a language is only a matter of learning its syntax, capabilities, drawbacks and use of available libraries, but what it’s more important is knowing how to program, being able to design algorithms. So if you have a problem, you can grab any book about the language you want and after a few tries you’ll have some code working. Of course you may face some obstacles an old seasoned programmer (in that language) wouldn’t, but that’s something that comes with experience. In short, I don’t think learning a given language first will make your life easier when learning another one.
Regarding Python, I recommend:
October 8, 2011 at 3:17 am #42512AnonymousParticipant
I think learning a language is only a matter of learning its syntax, capabilities, drawbacks and use of available libraries, but what it’s more important is knowing how to program, being able to design algorithms.
This is generally true. I have found that scripting is just as easy as coding and really it depends what your end goal is. Most w/ a sysadmin background start with scripting as it seems a more natural progression.
October 10, 2011 at 4:16 pm #42513TribanParticipant
I will +1 the scripting route as well, but also +1 the “depends on what you want to do.” But yes, scripting will give you some basic programming knowledge or principles and such and yes if you look programming code and scripting code side-by-side, it will look pretty similar in its design and such.
I am actually learning Python now using http://learnpythonthehardway.org/ – the html book is free but if you like the hardcopy you can purhcase that or the PDF. Just be careful with Python, I would recommend sticking to 2.6-2.7 since there are annoying changes in 3.0 which make learning something new sort of a PITA when the reading material is not up to snuff. Also you can check out Dive Into Python but the online version seems to have been removed.
October 11, 2011 at 10:21 pm #42514
Thanks all for the advice. 🙂
- You must be logged in to reply to this topic.