Book Image

Security with Go

By : John Daniel Leon, Karthik Gaekwad
Book Image

Security with Go

By: John Daniel Leon, Karthik Gaekwad

Overview of this book

Go is becoming more and more popular as a language for security experts. Its wide use in server and cloud environments, its speed and ease of use, and its evident capabilities for data analysis, have made it a prime choice for developers who need to think about security. Security with Go is the first Golang security book, and it is useful for both blue team and red team applications. With this book, you will learn how to write secure software, monitor your systems, secure your data, attack systems, and extract information. Defensive topics include cryptography, forensics, packet capturing, and building secure web applications. Offensive topics include brute force, port scanning, packet injection, web scraping, social engineering, and post exploitation techniques.
Table of Contents (15 chapters)

Brute forcing database login

Database logins can be automated and brute forced just like the other methods. In the previous brute force examples, the majority of the code is the same. The major difference between the applications is the function that actually tests the authentication. Instead of repeating all that code again, these snippets will simply demonstrate how to log in to the various databases. Modify the previous brute force scripts to test for one of these instead of the SSH or HTTP method.

To protect against this, limit access to a database to only the machines that need it and disable root remote login.

Go does not provide any database drivers in the standard library, only the interfaces. Therefore, all of these database examples require a third-party package from GitHub, as well as a running instance of the database to connect to. This book does not cover how to...