Day 11 - Proxy II

15th鐵人賽 python for cybersecurity black hat python

monles_yen

2023-09-11 18:45:12

332 瀏覽

分享至

This series of tutorials is aimed to share the notes taken while I was learning python for cybersecurity with the book - Black Hat Python.
這系列教學文章為學習筆記+延伸資源，旨在分享學習書籍 Black Hat Python時所思所學，也希望能幫助想了解Python和資安的大大們入門。

This tutorail has also been written in English in Medium.

看文前, 你應該要具備以下基礎能力:

Let's get started! 開始吧!

Proxy II

定義一個函式hexdump，它會:

接收一些輸入(input)當作bytes或(字串)string()，並印出hexdump到console
輸出packet細節，以十六進位的值，或ASCII印得出來的字元為格式(hexadecimal values and ASCII-printable characters)
對了解不知名的協議(protocol)、找到以空白檔案紀錄的使用者的身分驗證資訊( finding user credentials in plaintext protocols)，and much more...

import sys
import socket
import threading

HEX_FILTER = ''.join(
    [(len(repr(chr(i))) == 3) and chr(i) or '.' for i in range(256)])

def hexdump(src, length=16, show=True):
    if isinstance(src, bytes):
        src = src.decode()
    results = list()
    for i in range(0, len(src), length):
        word = str(src[i:i+length])
        printable = word.translate(HEX_FILTER)
        hexa = ' '.join([f'{ord(c):02X}' for c in word])
        hexwidth = length*3
        results.append(f'{i:04x}  {hexa:<{hexwidth}}  {printable}')
    if show:
        for line in results:
            print(line)
    else:
        return results

HEX_FILTER 字串包含了: