5 ms·
I haven't read the book but definitely will. I work in security and have noticed most security people are not software engineers and mostly know how to cobble
by ejcx 9y ago
I haven't read the book but definitely will.
I work in security and have noticed most security people are not software engineers and mostly know how to cobble together python scripts.
Go is much better for this with the extremely strong stdlib, types, simplicity, etc. I've been pushing my security friends to adopt go for a while and I'm glad there's a book to point them to.
- konart 9y ago>March 2018 No shit you haven't :D
- tptacek 9y agoFor penetration testing, Python's standard library is much more useful than Go's, and there are way more third party libraries.
- ejcx 9y agoYeah scapy is nice and there's a lot of nice libs, but security engineering and building of tools Go wins every time. Especially when it's something brand new.
- tptacek 9y agoI like Golang a lot and have built a bunch of things in it, but I do not think that for the stuff "Black Hat Go" is talking about that Go is more effective than Python. Python is one of my least favorite language, and it is practically the lingua franca of offensive security (followed by Ruby).
- johnpython 9y agoWouldn't the capability to compile a completely self-contained binary for any platform that can avoid AV be really appealing to pentesters?