Book Image

Python Penetration Testing Essentials

By : Mohit
Book Image

Python Penetration Testing Essentials

By: Mohit

Overview of this book

Related Content you might be interested in

Current Title:

Small book image
Python Penetration Testing Essentials
Mohit
Jan, 2015 | 178 pages
No titles found
Table of Contents (14 chapters)
Python Penetration Testing Essentials
Python Penetration Testing Essentials
Credits
Credits
About the Author
About the Author
About the Reviewers
About the Reviewers
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Python with Penetration Testing and Networking
Python with Penetration Testing and Networking
Introducing the scope of pentesting
Approaches to pentesting
Introducing Python scripting
Understanding the tests and tools you'll need
Learning the common testing platforms with Python
Network sockets
Server socket methods
Client socket methods
General socket methods
Moving on to the practical
Summary
2
Scanning Pentesting
Scanning Pentesting
How to check live systems in a network and the concept of a live system
What are the services running on the target machine?
Summary
3
Sniffing and Penetration Testing
Sniffing and Penetration Testing
Introducing a network sniffer
Implementing a network sniffer using Python
Learning about packet crafting
Introducing ARP spoofing and implementing it using Python
Testing the security system using custom packet crafting and injection
Summary
4
Wireless Pentesting
Wireless Pentesting
Wireless SSID finding and wireless traffic analysis by Python
Wireless attacks
Summary
5
Foot Printing of a Web Server and a Web Application
Foot Printing of a Web Server and a Web Application
The concept of foot printing of a web server
Introducing information gathering
Information gathering of a website from SmartWhois by the parser BeautifulSoup
Banner grabbing of a website
Hardening of a web server
Summary
6
Client-side and DDoS Attacks
Client-side and DDoS Attacks
Introducing client-side validation
Tampering with the client-side parameter with Python
Effects of parameter tampering on business
Introducing DoS and DDoS
Summary
7
Pentesting of SQLI and XSS
Pentesting of SQLI and XSS
Introducing the SQL injection attack
Types of SQL injections
Understanding the SQL injection attack by a Python script
Learning about Cross-Site scripting
Summary
Index
Index

Chapter 5. Foot Printing of a Web Server and a Web Application

So far, we have read four chapters that are related from the data link layer to the transport layer. Now, we move on to application layer penetration testing. In this chapter, we will go through the following topics:

  • The concept of foot printing of a web server

  • Introducing information gathering

  • HTTP header checking

  • Information gathering of a website from smathwhois.com by the parser BeautifulSoup

  • Banner grabbing of a website

  • Hardening of a web server

Previous Section
End of Section 1
Next Section