Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Python Penetration Testing Essentials
  • Table Of Contents Toc
Python Penetration Testing Essentials

Python Penetration Testing Essentials

By : Mohit Raj
3 (9)
Buy this Book
close
close
Python Penetration Testing Essentials

Python Penetration Testing Essentials

3 (9)
By: Mohit Raj
Buy this Book

Overview of this book

If you are a Python programmer or a security researcher who has basic knowledge of Python programming and want to learn about penetration testing with the help of Python, this book is ideal for you. Even if you are new to the field of ethical hacking, this book can help you find the vulnerabilities in your system so that you are ready to tackle any kind of attack or intrusion.
Table of Contents (9 chapters)
close
close
close
Preface
Icon
Preface
Icon
What this book covers
Icon
What you need for this book
Icon
Who this book is for
Icon
Conventions
Icon
Reader feedback
Icon
Customer support
Lock Free Chapter
1
1. Python with Penetration Testing and Networking
Icon
1. Python with Penetration Testing and Networking
Icon
Introducing the scope of pentesting
Icon
Approaches to pentesting
Icon
Introducing Python scripting
Icon
Understanding the tests and tools you'll need
Icon
Learning the common testing platforms with Python
Icon
Network sockets
Icon
Server socket methods
Icon
Client socket methods
Icon
General socket methods
Icon
Moving on to the practical
Icon
Summary
2
2. Scanning Pentesting
Icon
2. Scanning Pentesting
Icon
How to check live systems in a network and the concept of a live system
Icon
What are the services running on the target machine?
Icon
Summary
3
3. Sniffing and Penetration Testing
Icon
3. Sniffing and Penetration Testing
Icon
Introducing a network sniffer
Icon
Implementing a network sniffer using Python
Icon
Learning about packet crafting
Icon
Introducing ARP spoofing and implementing it using Python
Icon
Testing the security system using custom packet crafting and injection
Icon
Summary
4
4. Wireless Pentesting
Icon
4. Wireless Pentesting
Icon
Wireless SSID finding and wireless traffic analysis by Python
Icon
Wireless attacks
Icon
Summary
5
5. Foot Printing of a Web Server and a Web Application
Icon
5. Foot Printing of a Web Server and a Web Application
Icon
The concept of foot printing of a web server
Icon
Introducing information gathering
Icon
Information gathering of a website from SmartWhois by the parser BeautifulSoup
Icon
Banner grabbing of a website
Icon
Hardening of a web server
Icon
Summary
6
6. Client-side and DDoS Attacks
Icon
6. Client-side and DDoS Attacks
Icon
Introducing client-side validation
Icon
Tampering with the client-side parameter with Python
Icon
Effects of parameter tampering on business
Icon
Introducing DoS and DDoS
Icon
Summary
7
7. Pentesting of SQLI and XSS
chevron up
Icon
7. Pentesting of SQLI and XSS
Icon
Introducing the SQL injection attack
Icon
Types of SQL injections
Icon
Understanding the SQL injection attack by a Python script
Icon
Learning about Cross-Site scripting
Icon
Summary
8
Index
Icon
Index

Learning about Cross-Site scripting

In this section, we will discuss the Cross-Site Scripting (XSS) attack. XSS attacks exploit vulnerabilities in dynamically-generated web pages, and this happens when invalidated input data is included in the dynamic content that is sent to the user's browser for rendering.

Cross-site attacks are of the following two types:

  • Persistent or stored XSS

  • Nonpersistent or reflected XSS

Persistent or stored XSS

In this type of attack, the attacker's input is stored in the web server. In several websites, you will have seen comment fields and a message box where you can write your comments. After submitting the comment, your comment is shown on the display page. Try to think of one instance where your comment becomes part of the HTML page of the web server; this means that you have the ability to change the web page. If proper validations are not there, then your malicious code can be stored in the database, and when it is reflected back on the web page, it produces...

CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Python Penetration Testing Essentials
End of Section 7
Next Section
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon