Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Python Web Penetration Testing Cookbook
  • Table Of Contents Toc
Python Web Penetration Testing Cookbook

Python Web Penetration Testing Cookbook

By : Cameron Buchanan, Terry Ip, Andrew Mabbitt, Benjamin May
3.5 (4)
Buy this Book
close
close
Python Web Penetration Testing Cookbook

Python Web Penetration Testing Cookbook

3.5 (4)
By: Cameron Buchanan, Terry Ip, Andrew Mabbitt, Benjamin May
Buy this Book

Overview of this book

This book is for testers looking for quick access to powerful, modern tools and customizable scripts to kick-start the creation of their own Python web penetration testing toolbox.
Table of Contents (11 chapters)
close
close
close
Preface
Icon
Preface
Icon
What this book covers
Icon
What you need for this book
Icon
Who this book is for
Icon
Sections
Icon
Conventions
Icon
Reader feedback
Icon
Customer support
Lock Free Chapter
1
1. Gathering Open Source Intelligence
Icon
1. Gathering Open Source Intelligence
Icon
Introduction
Icon
Gathering information using the Shodan API
Icon
Scripting a Google+ API search
Icon
Downloading profile pictures using the Google+ API
Icon
Harvesting additional results from the Google+ API using pagination
Icon
Getting screenshots of websites with QtWebKit
Icon
Screenshots based on a port list
Icon
Spidering websites
2
2. Enumeration
Icon
2. Enumeration
Icon
Introduction
Icon
Performing a ping sweep with Scapy
Icon
Scanning with Scapy
Icon
Checking username validity
Icon
Brute forcing usernames
Icon
Enumerating files
Icon
Brute forcing passwords
Icon
Generating e-mail addresses from names
Icon
Finding e-mail addresses from web pages
Icon
Finding comments in source code
3
3. Vulnerability Identification
Icon
3. Vulnerability Identification
Icon
Introduction
Icon
Automated URL-based Directory Traversal
Icon
Automated URL-based Cross-site scripting
Icon
Automated parameter-based Cross-site scripting
Icon
Automated fuzzing
Icon
jQuery checking
Icon
Header-based Cross-site scripting
Icon
Shellshock checking
4
4. SQL Injection
Icon
4. SQL Injection
Icon
Introduction
Icon
Checking jitter
Icon
Identifying URL-based SQLi
Icon
Exploiting Boolean SQLi
Icon
Exploiting Blind SQL Injection
Icon
Encoding payloads
5
5. Web Header Manipulation
chevron up
Icon
5. Web Header Manipulation
Icon
Introduction
Icon
Testing HTTP methods
Icon
Fingerprinting servers through HTTP headers
Icon
Testing for insecure headers
Icon
Brute forcing login through the Authorization header
Icon
Testing for clickjacking vulnerabilities
Icon
Identifying alternative sites by spoofing user agents
Icon
Testing for insecure cookie flags
Icon
Session fixation through a cookie injection
6
6. Image Analysis and Manipulation
Icon
6. Image Analysis and Manipulation
Icon
Introduction
Icon
Hiding a message using LSB steganography
Icon
Extracting messages hidden in LSB
Icon
Hiding text in images
Icon
Extracting text from images
Icon
Enabling command and control using steganography
7
7. Encryption and Encoding
Icon
7. Encryption and Encoding
Icon
Introduction
Icon
Generating an MD5 hash
Icon
Generating an SHA 1/128/256 hash
Icon
Implementing SHA and MD5 hashes together
Icon
Implementing SHA in a real-world scenario
Icon
Generating a Bcrypt hash
Icon
Cracking an MD5 hash
Icon
Encoding with Base64
Icon
Encoding with ROT13
Icon
Cracking a substitution cipher
Icon
Cracking the Atbash cipher
Icon
Attacking one-time pad reuse
Icon
Predicting a linear congruential generator
Icon
Identifying hashes
8
8. Payloads and Shells
Icon
8. Payloads and Shells
Icon
Introduction
Icon
Extracting data through HTTP requests
Icon
Creating an HTTP C2
Icon
Creating an FTP C2
Icon
Creating an Twitter C2
Icon
Creating a simple Netcat shell
9
9. Reporting
Icon
9. Reporting
Icon
Introduction
Icon
Converting Nmap XML to CSV
Icon
Extracting links from a URL to Maltego
Icon
Extracting e-mails to Maltego
Icon
Parsing Sslscan into CSV
Icon
Generating graphs using plot.ly
10
Index
Icon
Index

Fingerprinting servers through HTTP headers

The next part of the HTTP protocol that we will be concentrating on are the HTTP headers. Found in both the requests and responses from the web server, these carry extra information between the client and server. Any area with extra data makes a great place to parse information about the servers and to look for potential issues.

How to do it…

The following is a simple header grabbing script that will parse the response headers in an attempt to identify the web server technology in use:

import requests

req = requests.get('http://packtpub.com')
headers = ['Server', 'Date', 'Via', 'X-Powered-By', 'X-Country-Code']

for header in headers:
    try:
  result = req.headers[header]
        print '%s: %s' % (header, result)
    except Exception, error:
        print '%s: Not found' % header

How it works…

The first part of the script makes a simple GET request to the target web server, through the familiar requests library:

req = requests.get('http://packtpub...
CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Python Web Penetration Testing Cookbook
End of Section 5
Next Section
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon