April 20, 2004

Practical PERL for the Information Security Professional

I found an interesting paper published by SANS that introduces Perl as a useful, flexible, and extensible tool for the security practitioner. The paper includes examples of Perl's ability to process log files, grab banners of network services, craft network packets and to exploit code that writes to unchecked buffers.

If you aren't using Perl for such tasks you really should look into it. Its a powerful tool that you will find makes life considerably easier for ya. Especially when doing fault injection testing, test parsing with regex and quick and dirty network test scripts.

Posted by SilverStr at April 20, 2004 12:01 AM | TrackBack
Comments

Haha "Practical Perl". File that with "Military Intelligence", "Lawyer Ethics" and "Microsoft Security"

Posted by: Gareth Lewin at April 20, 2004 08:53 AM

"Perl"? Wassat?

Posted by: Arcterex at April 20, 2004 08:53 AM

Perl's about as practical and pragmatic as a language can be, which may be part of why it's not always looked well upon by CS departments. Thanks for the reference, Dana. It looks like a good read.

Posted by: James Walden at April 20, 2004 09:43 AM