Sign In Start Free Trial

Book Overview & Buying
Table Of Contents
Feedback & Rating

Python Penetration Testing Essentials

By : Mohit Raj

3 (9)

Python Penetration Testing Essentials

3 (9)

By: Mohit Raj

Overview of this book

If you are a Python programmer or a security researcher who has basic knowledge of Python programming and want to learn about penetration testing with the help of Python, this book is ideal for you. Even if you are new to the field of ethical hacking, this book can help you find the vulnerabilities in your system so that you are ready to tackle any kind of attack or intrusion.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

1. Python with Penetration Testing and Networking

1. Python with Penetration Testing and Networking

Introducing the scope of pentesting

Approaches to pentesting

Introducing Python scripting

Understanding the tests and tools you'll need

Learning the common testing platforms with Python

Network sockets

Server socket methods

Client socket methods

General socket methods

Moving on to the practical

Summary

2. Scanning Pentesting

2. Scanning Pentesting

How to check live systems in a network and the concept of a live system

What are the services running on the target machine?

Summary

3. Sniffing and Penetration Testing

3. Sniffing and Penetration Testing

Introducing a network sniffer

Implementing a network sniffer using Python

Learning about packet crafting

Introducing ARP spoofing and implementing it using Python

Testing the security system using custom packet crafting and injection

Summary

4. Wireless Pentesting

4. Wireless Pentesting

Wireless SSID finding and wireless traffic analysis by Python

Wireless attacks

Summary

5. Foot Printing of a Web Server and a Web Application

5. Foot Printing of a Web Server and a Web Application

The concept of foot printing of a web server

Introducing information gathering

Information gathering of a website from SmartWhois by the parser BeautifulSoup

Banner grabbing of a website

Hardening of a web server

Summary

6. Client-side and DDoS Attacks

6. Client-side and DDoS Attacks

Introducing client-side validation

Tampering with the client-side parameter with Python

Effects of parameter tampering on business

Introducing DoS and DDoS

Summary

7. Pentesting of SQLI and XSS

7. Pentesting of SQLI and XSS

Introducing the SQL injection attack

Types of SQL injections

Understanding the SQL injection attack by a Python script

Learning about Cross-Site scripting

Summary

Index

Index

Customer Reviews

3 (9)

5 star

11.1%

4 star

33.3%

3 star

22.2%

2 star

11.1%

1 star

22.2%

Approaches to pentesting

There are three types of approaches to pentesting:

Black-box pentesting follows non-deterministic approach of testing
- You will be given just a company name
- It is like hacking with the knowledge of an outside attacker
- There is no need of any prior knowledge of the system
- It is time consuming
White-box pentesting follows deterministic approach of testing
- You will be given complete knowledge of the infrastructure that needs to be tested
- This is like working as a malicious employee who has ample knowledge of the company's infrastructure
- You will be provided information on the company's infrastructure, network type, company's policies, do's and don'ts, the IP address, and the IPS/IDS firewall
Gray-box pentesting follows hybrid approach of black and white box testing
- The tester usually has limited information on the target network/system that is provided by the client to lower costs and decrease trial and error on the part of the pentester
- It performs the security assessment and testing internally

Visually different images

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Python Penetration Testing Essentials

Search

Your notes and bookmarks