Ethical Hacking: Design Command and Control using Python 3 from Udemy

What's inside

Learning objectives

Python coding and how to build a feature rich command and control tool that you can use for authorized cybersecurity tests, for fun, or for educational purposes
How to code the client and server portions of the tool and enable them to interact with each other
How to run the client code on target computers that do not have python installed
How to build the client code for either windows or linux operating systems
How to implement aes encryption for all traffic between client and server
How to implement the following features in your tool: reverse shell, key logging, screen captures, clipboard stealing, turning volume up, playing audio files
And more features: displaying images, upload/download of files, zip/encrypt of files, unzip/decrypt of files

And more features: running operating system commands in the background, flipping computer's screen upside down, typing on the compromised computer
How to allow for multiple compromised computers to communicate to the c2 server and switch control over them
Numerous python concepts and terminology; every line or block of code is explained
How to use wireshark, windows subsystem for linux (wsl), ubuntu linux, and pycharm community edition integrated development environment (ide)
How to operate the c2 server in a cloud, and more
Show more
Show less

Python coding and how to build a feature rich command and control tool that you can use for authorized cybersecurity tests, for fun, or for educational purposes
How to code the client and server portions of the tool and enable them to interact with each other
How to run the client code on target computers that do not have python installed
How to build the client code for either windows or linux operating systems
How to implement aes encryption for all traffic between client and server
How to implement the following features in your tool: reverse shell, key logging, screen captures, clipboard stealing, turning volume up, playing audio files
And more features: displaying images, upload/download of files, zip/encrypt of files, unzip/decrypt of files
And more features: running operating system commands in the background, flipping computer's screen upside down, typing on the compromised computer
How to allow for multiple compromised computers to communicate to the c2 server and switch control over them
Numerous python concepts and terminology; every line or block of code is explained
How to use wireshark, windows subsystem for linux (wsl), ubuntu linux, and pycharm community edition integrated development environment (ide)
How to operate the c2 server in a cloud, and more
Show more
Show less

Syllabus

This section explains the course and why Python is a great language to use for building a c2 tool

This video explains the instructor's background, as well as the content and style of the course.

This video explains that the command and control tool is to be used with authorization only and always in an ethical manner.

This video explains why Python is a popular choice for offensive cybersecurity tools.

This video explains what is required for the course versus what is optional. It also explains the differences between a build system, target system, and server. The instructor's preference for your configuration is presented, but as you will see, you have the freedom to choose whatever suits you the best.

This video will show how to install the latest version of Python 3.

This video will show how to install the latest version of the PyCharm Community Edition Integrated Development Environment (IDE).

This video will show how to install Ubuntu Linux inside of Windows Subsystem for Linux (WSL) and how to use it.

This video will show how to setup and configure Ubuntu Linux in the Amazon Web Services cloud.

This video will show how to install and configure the PuTTY SSH client tool.

This video will show how to install the Wireshark packet capture tool.

This video will show how to create your project and begin the client code for command and control.

This video will show how to obtain the request headers that were sent to the web server.

This video will show how to change the request headers that are sent to the web server. In particular, you will learn how to make your c2 client look like a modern web browser.

This video will show how to add a proxy option for your c2 client.

This quiz will test your knowledge of the first three sections of the course.

This video shows how to begin putting together the code for the c2 server.

This video will show you how to change the version information for the c2 server.

This video shows how to properly and uniquely identify the compromised windows computers to the c2 server.

This video shows how to override a parent class method with our own method.

This video shows how to properly and uniquely identify the compromised Linux computers to the c2 server.

This video shows how to implement exception handling for the getenv function.

This video provides a summary review of all the Python code used so far in the course.

This quiz covers the Server Code Beginnings section of the course.

This video will show how to begin implementation for a reverse shell capability.

This video will show how to implement exception handling for the requests module's get function.

This video will show how to send a command from the c2 server to the compromised computer.

This video shows how to run the command on the compromised computer that was sent from the c2 server.

This video shows how to send a command's output from the compromised computer to the c2 server.

This video shows how to create and use a settings module. Linux testing is also covered in this video.

This video covers a summary review of all the Python code utilized in the Command Code Beginnings section of this course.

This quiz covers the Command Code Beginnings section of this course.

This video shows how to add a change directory capability for the command and control tool.

This video shows how to handle the exceptions that can occur when changing directory on a compromised computer.

This video shows how to fix the prompt at the c2 server and how to correct another issue with the command being blank.

This video shows how to handle a broken pipe exception and how to obtain a new active client.

This video shows how to place the current working directory from the compromised computer in to the prompt on the c2 server.

This video shows how to implement a client kill command to exit the malware on the compromised computer. It also includes information for putting the malware to sleep via a client sleep command.

This video covers the implementation of a solution that allows the command and control tool to avoid being timed out when the c2 server is hosted within an Azure environment.

This video shows how to obtain a new active client when a client kill command has been issued.

This video provides a summary review of all the Python code introduced during the Begin Adding Features section of the course.

This quiz aligns with the Begin Adding Features section of this course.

This video shows how to implement end-to-end symmetric key encryption in the command and control tool.

This quiz covers the Implementing Encryption section of the course.

This video provides a summary review of all the code introduced during the Implementing Encryption section of the course. Python type hinting is also covered.

This video shows how to implement code on the client to allow for a file to be downloaded from the c2 server to the compromised computer. This is accomplished via a client download FILENAME command.

This video shows how to implement code on the c2 server to allow for a file to be downloaded to the compromised computer.

This video shows how to implement code to allow for a file to be uploaded from the the compromised computer to the c2 server. This is accomplished via a client upload FILENAME command.

This video shows how to implement code to allow for a file to be uploaded from the the compromised computer to the c2 server.

This video shows how to zip and encrypt a file on the compromised computer. The command for this is client zip FILENAME.

This video shows how to refactor code and addresses a bug in the program.

This video shows how to unzip and decrypt a file on the compromised computer. This is accomplished via the client unzip FILENAME.zip command.

This video explains how to go about testing the command and control tool's code.

This video addresses a bug in the program when spaces are in filenames. It also shows how to reset the prompt when a new compromised computer is active.

This video provides a summary review of all the Python code that was introduced during the File Related Features section of the course.

This quiz covers the File Related Features section of the course.

This video explains how to implement threading capabilities for the c2 server.

This video shows how to implement a server show clients command to list each of the compromised clients at the c2 server.

This video shows how to implement a server control PWNED_ID command. This allows the red team operator to switch over control to a different compromised computer. The video also shows how to implement a server exit command to allow a clean shutdown of the c2 server.

This video shows how to implement a server unzip FILENAME command at the c2 server. This allows the red team operator to unzip and decrypt encrypted zip files that are are uploaded from the compromised computers.

This video shows how to implement a server zip FILENAME command at the c2 server. This allows the red team operator to zip and encrypt files that can then be staged for download to compromised computers. The video also covers some exception handling.

This video shows how to implement a server list DIRECTORY command and a server shell command. These commands allow the red team operator to list files on the server, or to access a shell prompt on the server and then be able to easily return to the c2 server terminal window once done working in the shell.

This video shows how to implement a server help command, which gives some quick help to the screen regarding all of the client and server commands available within the tool. The video also covers the setup of logging on the c2 server.

This video shows how to respond to the compromised computer's HTTP GET request if commands are being run at the server instead of on the compromised computer itself.

This video is a Python summary review of all of the code introduced during the Server Commands section of the course.

This quiz covers the Server Commands section of the course.

This video shows how to implement a client delay SECONDS command. This command sets the amount of time an inactive compromised computer waits in between HTTP GET requests to the c2 server.

This video shows how to implement a client get clipboard command. This command will allow the red team operator to steal the compromised computer's cached clipboard information.

This video shows how to implement client keylog on and client keylog off commands. These commands allow the red team operator to log keystrokes from the compromised system.

This video shows how to implement a client type TEXT command. The command allows the red team operator to type text using the compromised computer's keyboard from the c2 server.

This video shows how to implement a client screenshot command. The command allows the red team operator to take a screenshot of the compromised computer's monitors from the c2 server.

This video shows how to implement a client display IMAGE command. The command allows the red team operator to display an image file on the compromised computer's screen from the c2 server.

This video shows how to implement a client flip screen command. The command allows the red team operator to flip the compromised computer's screens upside down from the c2 server. The video also shows how to implement a client roll screen command. That command allows the red team operator to barrel roll the compromised computer's screens from the c2 server.

This video shows how to implement a client max volume command. The command allows the red team operator to turn up the volume to 100% on the compromised computer from the c2 server. The video also shows how to implement a client play FILENAME.wav command. That command allows the red team operator to play a sound file on the compromised computer from the c2 server.

This video shows how to code the command and control tool to allow for operating system commands or other scripts to run in the background, even on compromised Windows computers.

This video was a late addition. I had missed a few Try/Except statements when creating the course. Those are covered now in this video.

This video provides a summary review of all of the Python code introduced during the Client Commands section of the course.

This quiz covers the Client Commands section of the course.

This video shows how to create individual client code bases for Linux and Windows operating systems and explains why.

This video shows the Linux client to Linux c2 server test results. It also covers some bug fixes.

This video covers serveral useful topics related to the command and control tool being used for Linux targets.

This video covers testing of the command and control tool's code.

This video shows how to package the Windows-based target's command and control tool as a single executable file that contains all of the files necessary for operation, including Python itself and all of the dependencies. When run, everything will extract and run silently in the background with no visible evidence of this fact on the compromised computer's screen.

This video shows how to package the Linux-based target's command and control tool as a single executable file that contains all of the files necessary for operation, including Python itself and all of the dependencies. The video also shows how to run this executable file on the target system without being noticed.

This video shows how to package the target's command and control tool as a folder that contains all of the files necessary for operation, including Python itself and all of the dependencies.

Traffic lights

Read about what's good

what should give you pause

and possible dealbreakers

Uses Python 3, which is a widely used language in cybersecurity for scripting, automation, and tool development, making it highly relevant for those looking to enter or advance in the field

Covers the design and implementation of a command and control (C2) tool, a core component used in red teaming and penetration testing to simulate real-world attack scenarios

Includes hands-on labs and step-by-step instructions, allowing learners to actively build and test their own C2 tool, which reinforces learning and develops practical skills

Explores the use of Wireshark, a popular network protocol analyzer, which is essential for analyzing network traffic and identifying vulnerabilities during ethical hacking engagements

Requires learners to install and use tools like WSL, Ubuntu Linux, and PyCharm, which may require some initial setup and configuration, potentially posing a barrier for absolute beginners

Focuses on building a specific tool, which may not cover the breadth of ethical hacking topics, so learners may need to supplement their knowledge with other resources

Reviews summary

Build ethical hacking c2 in python

According to learners, this course provides a strong foundation in building a Command and Control (C2) tool using Python 3. Students particularly appreciate the practical, hands-on approach, building the tool step-by-step from scratch. The instructor is frequently described as knowledgeable and able to explain complex concepts clearly, even when dealing with bugs during the live coding sessions. While some reviews mention a steep learning curve for absolute beginners or note areas that could be more in-depth, the overall sentiment is highly positive. Learners find the course structure logical and the Python explanations helpful for beginners.

Deep dive into C2, not a broad hacking overview.

"As the description says, this is focused purely on building the C2, not a general hacking course."

"If you're expecting a wide range of hacking topics, this isn't it. It's a deep dive on one tool."

"The narrow focus allows for great depth on the command and control system."

See how a real expert handles coding challenges.

"Watching him troubleshoot bugs live was surprisingly one of the most helpful parts."

"It felt authentic to see issues arise and be fixed during the coding."

"Learning how to debug alongside the instructor is a great experience."

Provides a strong starting point in C2 development.

"I feel like I have a solid foundation to build upon after taking this course."

"It's a great introduction to the concepts and practical coding of C2."

"This course gives you the core skills needed to create your own tools."

Instructor explains Python code and concepts clearly.

"The instructor explains every line of code and concept thoroughly."

"He makes even complicated Python topics easy to understand."

"I appreciated the detailed explanations of the code being written."

Learn by doing: Build a functional C2 tool step-by-step.

"The hands-on project where we build the C2 tool step by step was incredibly valuable."

"I really liked building the tool alongside the instructor; it made the concepts stick."

"This course isn't just theory; it's practical tool building that I can use."

Instructor is highly knowledgeable and engaging.

"The instructor is clearly an expert and passionate about the subject."

"His background and experience add a lot of credibility to the lessons."

"The way he handles issues that come up feels very realistic and educational."

May be challenging without foundational Python knowledge.

"While Python is explained, having some prior knowledge helps immensely."

"As a complete beginner to Python, I found myself needing to supplement with other resources."

"It moves quickly sometimes if you're not already comfortable with Python syntax."

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Ethical Hacking: Design Command and Control using Python 3 with these activities:

Review Python Fundamentals

Show steps

Strengthen your understanding of Python fundamentals to better grasp the course's code examples and build a solid foundation for ethical hacking tool development.

Browse courses on Python Basics

Show steps

Review basic Python syntax and data types.
Practice writing simple Python scripts.
Complete online Python tutorials or exercises.

Review Violent Python

Show steps

Explore practical Python examples for offensive security to enhance your understanding of ethical hacking techniques and apply them to command and control tool development.

View Violent Python: A Cookbook for Hackers,... on Amazon

Show steps

Read selected chapters focusing on network programming and security tools.
Experiment with the code examples provided in the book.
Adapt the code to fit the specific needs of the course project.

Practice Python Socket Programming

Show steps

Reinforce your understanding of network communication by practicing Python socket programming exercises, which are essential for building command and control tools.

Show steps

Write a simple client-server application using Python sockets.
Implement error handling and exception handling.
Experiment with different socket options and protocols.

Four other activities

Expand to see all activities and additional details

Show all seven activities

Black Hat Python

Show steps

Explore advanced Python techniques for penetration testing to deepen your understanding of offensive security concepts and apply them to command and control tool development.

View Black Hat Python, 2nd Edition: Python... on Amazon

Show steps

Read selected chapters focusing on network sniffing and packet manipulation.
Experiment with the code examples provided in the book.
Adapt the code to fit the specific needs of the course project.

Enhance the C2 Tool with a New Feature

Show steps

Extend the functionality of the command and control tool by implementing a new feature, such as process monitoring or webcam control, to deepen your understanding of ethical hacking and Python programming.

Show steps

Choose a new feature to implement in the C2 tool.
Research the necessary Python libraries and techniques.
Write the code for the new feature and integrate it into the existing tool.
Test the new feature thoroughly.

Document the C2 Tool

Show steps

Create comprehensive documentation for the command and control tool, including its architecture, features, and usage instructions, to solidify your understanding and share your knowledge with others.

Show steps

Outline the structure of the documentation.
Describe the architecture and components of the C2 tool.
Explain each feature and its usage.
Provide examples and screenshots.

Contribute to a Cybersecurity Project

Show steps

Contribute to an open-source cybersecurity project to gain practical experience, collaborate with other developers, and enhance your skills in ethical hacking and Python programming.

Show steps

Find an open-source cybersecurity project on GitHub.
Identify a bug or feature to work on.
Submit a pull request with your changes.
Respond to feedback from the project maintainers.

Career center

Learners who complete Ethical Hacking: Design Command and Control using Python 3 will develop knowledge and skills that may be useful to these careers:

Red Team Operator

A Red Team Operator simulates attacks on an organization to test its defenses. The design of the command and control using Python 3 approach in this course directly supports a red team operator's need to create custom attack tools. The course provides the practical skills to develop and deploy a fully functional command and control infrastructure, a critical component of red team operations. The course's emphasis on end-to-end encryption is relevant, allowing a red team operator to simulate real-world attacker tactics while avoiding detection. Furthermore, the course's coverage of client-side scripting and server-side management is directly applicable to a red team operator's workflow.

See salaries and explore the career path for Red Team Operator

Penetration Tester

A Penetration Tester identifies vulnerabilities in systems using techniques like those employed by ethical hackers. This course, focusing on designing a command and control tool using Python 3, directly aligns with the skills needed to simulate real-world attack scenarios. The ability to build custom tools, as taught in this course, gives a penetration tester a significant edge in tailoring assessments to specific environments and uncovering unique weaknesses. The course's comprehensive approach, from basic code to complete end-to-end encrypted command and control, provides a solid foundation for a penetration tester to understand and exploit system vulnerabilities. Learning how to handle bugs during the build process is invaluable. This course may be useful for a red team exercise.

See salaries and explore the career path for Penetration Tester

Malware Analyst

A malware analyst dissects and understands the inner workings of malicious software. This course helps a malware analyst by providing the skills to build and analyze command and control tools. The course's hands-on approach to building a command and control tool with Python 3 provides a deep understanding of how malware communicates, persists, and executes commands. The course's coverage of encryption techniques and network protocols is helpful for analyzing network traffic and identifying malicious communications. The ability to create custom commands and features, as taught in this course, enables a malware analyst to emulate malware behavior and develop effective detection and mitigation strategies.

See salaries and explore the career path for Malware Analyst

Vulnerability Researcher

A Vulnerability Researcher identifies and analyzes security flaws in software and hardware. This course is well suited for a vulnerability researcher because the course describes how to find and exploit vulnerabilities. The course's focus on building a command and control tool with Python 3 gives a vulnerability researcher practical experience in exploiting system weaknesses. The course's detailed explanations of code and best practices help a vulnerability researcher understand the underlying logic and design principles of software, making it easier to identify potential security flaws. The course's coverage of encryption techniques and network protocols is particularly valuable.

See salaries and explore the career path for Vulnerability Researcher

Reverse Engineer

A Reverse Engineer analyzes software to understand its functionality, often without access to the source code. This course directly applies to a reverse engineer's skillset by providing insight into the creation of tools they seek to understand. The course's focus on building a command and control tool with Python 3 may allow a reverse engineer to anticipate how malicious software is built. The course's detailed explanations of code and best practices help a reverse engineer understand the underlying logic and design principles of software, making it easier to reverse engineer complex systems. The course's coverage of encryption techniques is particularly valuable.

See salaries and explore the career path for Reverse Engineer

Cybersecurity Analyst

A Cybersecurity Analyst monitors and protects an organization's networks and systems. This course may be useful by providing insight into the tools and techniques used by attackers. The course's focus on building a command and control tool with Python 3 helps a cybersecurity analyst understand how malware operates, how attackers maintain persistence, and how to detect malicious activity. The course's coverage of encryption and network communication protocols is particularly relevant for analyzing network traffic and identifying suspicious patterns. Furthermore, the hands-on experience of building a functional tool offers a practical understanding of cybersecurity threats that theoretical knowledge alone cannot provide. A cybersecurity analyst will find the detailed explanations for each bit of code very helpful.

See salaries and explore the career path for Cybersecurity Analyst

Incident Responder

An Incident Responder investigates and responds to security breaches and incidents. This course may be useful for an incident responder by providing familiarity with attacker techniques. The course's focus on building a command and control tool with Python 3 helps an incident responder understand how attackers operate and maintain persistence within a compromised system. The course's coverage of encryption and network communication protocols is relevant for analyzing network traffic and identifying malicious communications. Furthermore, the hands-on experience of building a functional tool offers a practical understanding of security threats that theoretical knowledge alone cannot provide. The skills learned are very helpful in detecting and mitigating intrusions.

See salaries and explore the career path for Incident Responder

Security Engineer

Security Engineers are responsible for implementing and maintaining security systems. This course helps a security engineer by providing insight into the tools and techniques used by attackers. The course's focus on building a command and control tool with Python 3 helps a security engineer understand potential vulnerabilities and design robust security measures. The course's coverage of encryption and network communication protocols is particularly relevant for designing secure network architectures. Furthermore, the hands-on experience of building a functional tool offers a practical understanding of security threats that theoretical knowledge alone cannot provide. Specifically the course will help a security engineer design security measures to thwart command and control attacks.

See salaries and explore the career path for Security Engineer

Cloud Security Engineer

A Cloud Security Engineer specializes in securing cloud-based infrastructure and applications. This course is helpful because a significant portion pertains to cloud servers. The course's emphasis on building a command and control tool with Python 3 provides a foundation for understanding how attackers can target cloud environments. The course's coverage of encryption and network communication protocols is particularly relevant for securing data in transit and at rest in the cloud. The course's material on setting up a server in the cloud is directly applicable to a cloud security engineer's responsibilities. Ultimately, this course will allow one to design secure cloud architectures.

See salaries and explore the career path for Cloud Security Engineer

Security Consultant

A Security Consultant advises organizations on how to improve their security posture. This course helps a security consultant by providing insight into the tools and techniques used by attackers. The course's focus on building a command and control tool with Python 3 helps a security consultant understand the potential vulnerabilities and recommend effective security measures. The course's coverage of encryption and network communication protocols is relevant for assessing network security risks and recommending secure architectures. Furthermore, the hands-on experience of building a functional tool offers a practical understanding of security threats that theoretical knowledge alone cannot provide. The course's ethical and legal considerations are particularly important.

See salaries and explore the career path for Security Consultant

Application Security Engineer

Application Security Engineers specialize in securing software applications. An application security engineer can use the knowledge of command and control design presented in this course to better find vulnerabilities in applications. The course's emphasis on building a command and control tool using Python 3 provides a solid foundation for understanding how attackers can exploit application weaknesses. The course's detailed explanations of code and best practices help an application security engineer write more secure code and identify potential security flaws in existing applications. The course may also be useful in the automation of security tests. Learning how to handle bugs during the build process prepares one to manage application vulnerabilities.

See salaries and explore the career path for Application Security Engineer

Security Architect

A Security Architect designs and implements an organization's overall security strategy. This course may be useful by providing insight into the tools and techniques used by attackers. The course's focus on building a command and control tool with Python 3 helps a security architect understand the potential impact of security breaches and design effective defense mechanisms. The course's coverage of encryption and network communication protocols is relevant for designing secure network architectures and data protection strategies. Furthermore, the hands-on experience of building a functional tool offers a practical understanding of security threats that theoretical knowledge alone cannot provide. Particularly useful will be lessons on cloud based servers.

See salaries and explore the career path for Security Architect

Digital Forensics Analyst

A Digital Forensics Analyst investigates digital evidence to uncover facts related to security incidents or legal cases. This course may be useful by providing a deeper understanding of how attackers operate. The course's focus on building a command and control tool with Python 3 helps a digital forensics analyst understand the tools and techniques used by attackers to compromise systems. The knowledge of encryption covered in the class will be very helpful. Gaining familiarity with the building blocks of malicious software is crucial for examining digital evidence and reconstructing events. The command code beginnings section will provide the most value.

See salaries and explore the career path for Digital Forensics Analyst

Security Operations Center Analyst

A Security Operations Center Analyst monitors security systems and responds to alerts. This course may be useful because it provides a foundation for understanding attack vectors. The course's focus on building a command and control tool with Python 3 helps a security operations center analyst understand common attack techniques and identify suspicious activity. The course's coverage of network communication protocols is particularly relevant for analyzing network traffic and identifying potential security threats. An SOC analyst will likely be working with the same tools mentioned in the class, such as Wireshark.

See salaries and explore the career path for Security Operations Center Analyst

Information Security Manager

An Information Security Manager oversees an organization's information security program. This course may assist an information security manager with understanding and evaluating security risks. While this course is focused on the technical aspects of building a command and control tool with Python 3, the underlying concepts of network communication, encryption, and system exploitation are highly relevant to managing information security risks. Although they may not perform the coding and design process themselves, understanding the potential threats is key to effective risk management. The lessons on ethical hacking will be valuable for a risk assessment.

See salaries and explore the career path for Information Security Manager

Ethical Hacking

Design Command and Control using Python 3

What's inside

Learning objectives

Syllabus

Traffic lights

Save this course

Reviews summary

Build ethical hacking c2 in python

Activities

Career center

Reading list

Share

Similar courses