black-hat-rust - 使用Rust应用了攻击性安全- https://ke

项目说明

<p align="center">
<a href=" target="_blank" rel="noopener"><img alt="Black Hat Rust logo" src="./black_hat_rust_cover.png" height="300" /></a>
<h1 align="center">Black Hat Rust</h1>
<h3 align="center">Applied offensi with the Rust programming language</h3>
<h3 align="center">
<a href=" the book now!</a>
</h3>
</p>

While the Rust Book does an excellent job teaching What is Rust, a book about Why and How to Rust was missing.

Summary

Whether in movies or mainstream media, hackers are often romanticized: they are painted as black magic wizards, nasty criminals, or, in the worst cases, as thieves with a hood and a crowbar.
In reality, the spectrum of the profile of the attackers is extremely large, from the bored teenager exploring the internet to so State's armies as well as the unhappy former employee.

What are the moti of the attackers? How can they break seemingly so easily into any 网络? What do they do to their ?
We will put on our black hat and explore the world of offensi, whether it be cyber attacks, cybercrimes, or cyberwar.
Scanners, exploits, phishing toolkit, implants... From theory to practice, we will explore the arcane of offensi and build our own offensi with the Rust programming language, Stack O's most lo for fi in a row.

Which programming language allows to craft shellcodes, build servers, create phishing pages? Before Rust, none! Rust is the long-awaited one-size-fits-all programming language meeting all those requirements thanks to its unparalleled guarantees and feature set. Here is why.

<!--
The security programming field is defined by its extremely large scope (from shellcodes to servers and web apps). Rust is the long-awaited one-size-fits-all programming language meeting all those requirements thanks to its unparalleled guarantees and feature set. Here is why.

Rust is turning a new page in the history of programming languages by pro unparalleled guarantees and features, whether it be for defensive or offensi. I will to say that Rust is the long awaited one-size-fits-all programming language. Here is why. -->

Free Updates and DRM Free, of course :)

Who this book is for

This is NOT a 1000th tutorial about sqlmap and Metasploit, nor will it teach you the fundamentals of programming.

Instead, it's a from-theory-to-practice guide and you may enjoy it if any of the following:

But I repeat, this book is NOT a computer science book.

<h3>
<a href=" the book now!</a>
</h3>

Table of contents

#### Preface

#### 1 - Introduction

Part I: Reconnaissance

#### 2 - Multi-threaded attack surface discovery
How to perform effecti? In this chapter, we will build a multi-threaded scanner in order to automate the mapping of the target.

#### 3 - Going full speed with async
Unfortunately, when a program spends most of its time in I/O operations, multi-threading is not a panacea. We will learn how async makes Rust 代码 really, really fast and refactor our scanner to async 代码.

#### 4 - Adding modules with Trait objects
We will add more heterogeneous modules to our scanner and will learn how Rust's type system helps create properly designed large software projects.

#### 5 - Crawling the web for OSINT
Le all we learned pre, we will build an extremely fast web crawler to help us find the needles in the haystack the web is.

Part II: Exploitation

#### 6 - Finding
Once the external reconnaissance performed, it's time to find entry points. In this chapter we will learn how automated fuzzing can help us to find that can be exploited to then gain access to our target's systems.

#### 7 - Exploit de
Rust may not be as fast as python when it comes to iterating on quick scripts such as exploits, but as we will see, its powerful type and modules system make it nonetheless a weapon of choice.

#### 8 - Writing shellcodes in Rust
Shellcode de is an ungrateful task. Writing assembly by hand is definitely not sexy. Fortunately for us, Rust, one more time, got our back! In this chapter we will learn how to write shellcodes in plain Rust with no_std.

#### 9 - Phishing with WebAssembly
When they can't find exploitable hardware or software , attackers usually fall back to what is often the weakest link in the chain: Humans.
Again, Rust comes handy and will let us create ad phishing pages by compiling to WebAssembly.

Part III: Implant de

#### 10 - A modern RAT
A RAT (for Remote Access 工具), also known as implant or beacon, is a kind of software used to perform offensi on a target's machines. In this chapter we will build our own RAT communicating to a remote 服务端 and 数据库.

#### 11 - Securing communications with end-to-end encryption
The consequences of our own infrastructure being compromised or seized can be disastrous. We will add end-to-end encryption to our RAT's communication in order to secure its communications and avoid leaving traces on our servers.

#### 12 - Going multi-platforms
Today's computing landscape is extremely fragmented. From Windows to macOS, we can't target only one Operating System to ensure the success of our operations. In this section we will see how Rust's ecosystem is extremely useful when it comes to cross-compilation.

#### 13 - Turning into a worm to increase reach
Once the initial targets compromised, we will capitalize on Rust's excellent reusability to incorporate some parts of our initial scanner to turn our RAT into a worm and reach more targets only accessible from the target's internal 网络.

#### 14 Conclusion
Now it's your turn to get things done!

<h3>
<a href=" the book now!</a>
</h3>

FAQ

Can I pay with PayPal, Apple Pay or Google Pay?

Yes! You can now buy Black Hat Rust with PayPal, Apple Pay or Google Pay. Go Here to proceed.

<!-- ### The book is too expensive!

Black Hat Rust is designed to save you a lot of time in your learning journey of Rust and offensi.
The maths are simple: if the book saves you 20 hours, and you are paid 25$ / hour, you just saved 25 * 18 = 450$

Of course, I expect that the book will save you even more time! -->

What to do if I don't have a ?

A European is optional, and you can skip the field or leave it empty if asked.

<!-- ## Getting started

Knowledge has no value if you don't practice!

Where to start? I've got you covered! I' the security scanner we build in the book from chapters 2, 3, 4, and 7 into phaser: an automated attack surface mapper and scanner.

You can then contribute to your first Rust security project or participate in your first bug bounty program. -->

Community

Hey! Welcome you to the Black Hat Rustaceans gang! If you think something in the book or the 代码 can be improved, please open an issue. Pull requests are also welcome :)

Newsletter

Want to stay updated? I'll write you once a week about a complexity, hacking, and entrepreneurship.

*I hate spam even more than you do. I'll ne your email, and you can unsubscribe at anytime. Also, there is no tracking or ads.*

Changelog

You'll find all the updates in the Changelog:

项目信息

开发语言：Rust

Star 数：4432

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Applied offensi with Rust -

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。