Ethical Hacking: Design an Info Stealer using Python 3
What you'll learn
- Python coding and how to build an info stealer that you can use for authorized cybersecurity tests, or for educational purposes
- How to code a keylogger, along with code that takes screenshots, and code that copies whatever is stored in the clipboard
- How to run the code remotely on a target computer that you have access to via winrs, psexec, or wmic
- How to run the code on your local computer
- How to run the code on target computers that do not have Python installed
Requirements
- No programming experience necessary. I will walk you through every line of code and explain it all.
Description
Hello, My course, "Ethical Hacking: Design an Info Stealer using Python 3" has just been released here in 2024. The way this course works is as follows:
I will start at ground zero and show you how to design and build a fully functional "Info Stealer" that can be used on your own computer for educational purposes, or you can use it on remote computers at work, or if you have customers that you are conducting a Red Team exercise for, it can be used there as well.
Once we are finished building the tool together, it will perform three functions:
1) Keylogging - All keystrokes will be written to local disk, to a UNC path, or to a share.
2) Screenshots - Screenshots can occur on a time interval that you configure inside the code. They write to local disk, a UNC path, or to a share.
3) Clipboard - This works the same way the screenshots do, with a collection occuring on a set time interval and the results get written out to a file locally , or to a UNC path, or to a share.
I will explain all the code, so beginners shouldn't worry that much, yet intermediate coders may pick up a few things as well, and besides, the final product is going to be really cool.
I will also teach you how to turn your Python code into a single executable file, so that the Python code and all of its dependencies are included. Then when it comes time to run the Python on a target computer, Python doesn't need to be present on that system, and our code will run regardless.
Lastly, I will show you some Windows commands that are typically enabled or available on a corporate or government network that uses Microsoft Active Directory (AD). You may be able to use these commands to run your Python code remotely on a target computer if you are part of the same domain and you have "pwned" the proper credentials.
Who this course is for:
- Anyone interested in building their own ethical hacking tools using the Python 3 programming language. This is the perfect course to start with because it is not overly complicated, but it is very practical.
Instructor
- 4.8 Instructor Rating
- 41 Reviews
- 952 Students
- 2 Courses
I have over 30 years of experience in Network, Information, and Cybersecurity. I started my career as a Unix Administrator in a Telecommunications shop. From there, I moved to Local Area Networks and then on to Firewalls. I was one of the original members that helped form a Computer Emergency Response Team (CERT) for a US Department of Defense agency. I was also one of two to three that installed the network firewalls across that agency, positioned worldwide. I have many years of Incident Response and Computer Forensics experience. I also had a period where I was part of a Penetration Testing team and currently my job role is in Cyber Threat Emulation.
I graduated with a bachelor's degree in Electronics Engineering Technology. I learned 8085 Assembly, Basic, and C language over 35 years ago and continue to utilize C to this day. Several years ago, I wrote a command-and-control program in C that used a SSH library. This was in support of a Red Team. I have also completed projects in C#, PHP, PowerShell, and of course, Python. I have extensive shell scripting experience as well. I have always enjoyed scripting and working in Linux or UNIX or working from the command line in Windows.
I have maintained a few technical certifications from the SANS Institute, including GPEN (Penetration Testing), GREM (Reverse Engineering Malware), and GCIH (Incident Handling). I have also kept my EnCE (Computer Forensics) certification current and of course, my CISSP from ISC2.
In terms of hobbies outside of my career, my favorite is trail running. However, I do not enjoy street or sidewalk running. I prefer being deep in the woods on technical trails. This relieves stress and hopefully keeps me in shape as I age.