black-hat-rust

I think what the author hasn't realized yet is that for the most part - exploit development, fuzzing a binary, finding a logical problem and building a feasible exploit for it - you are fighting against the language that you chose. The reason Go got so popular is not because of its type system, but because it also has a mode of programming "good enough" prototypes. Python for exploit development is also great due to the gdb fork that can generate python payloads, offsets etc, but it sucks for deployment on targets. If I would compare the three language choices I don't see why anyone would choose Rust over the other two in terms of efficiency and not having to fight the language. I don't even know whether it would be possible to write an exploit that overflows something in an external ABI binary in Rust without sacrificing everything that

Hey HN, With all the recent hacks breaking the news, I thought that there is still clearly a lack of knowledge about how cyber attacks are performed. In the book we will put ourselves in the shoes of attackers. From theory to practice, we will explore the arcane of offensive security and build our own offensive tools from scratch in Rust: scanners, phishing toolkit, shellcodes, advanced RAT... Here is the accompanying GitHub repository: https://github.com/skerkour/black-hat-rust Important: This is work in progress, feedback is welcome :) In order to thank all the people who will help me make this book a reality by buying it in early access, I prepared a special bonus: a curated list of detailed analyses of the most advanced malwares of the past two decades. You will find inside great inspiration when developing your own offensive tools. E

Hey HN, With all the recent hacks breaking the news, I thought that there is still clearly a lack of knowledge about how cyber attacks are performed. In the book we will put ourselves in the shoes of attackers. From theory to practice, we will explore the arcane of offensive security and build our own offensive tools from scratch in Rust: scanners, phishing toolkit, shellcodes, advanced RAT... Here is the accompanying GitHub repository: https://github.com/skerkour/black-hat-rust Important: This is work in progress, feedback is welcome :) In order to thank all the people who will help me make this book a reality by buying it in early access, I prepared a special bonus: a curated list of detailed analyses of the most advanced malwares of the past two decades. You will find inside great inspiration when developing your own offensive tools. E