Index

A

• ACK flag scanning / ACK flag scanning
• active sniffing / Active sniffing
• admin console page
  • URL / Understanding the SQL injection attack by a Python script
• AP
  • clients, detecting / Detecting clients of an AP
• Apache / Introducing information gathering
• approaches, pen testing
  • black-box pen testing / Approaches to pentesting
  • white-box pen testing / Approaches to pentesting
  • gray-box pen testing / Approaches to pentesting
• ARP
  • about / Introducing ARP spoofing and implementing it using Python
  • request / The ARP request
  • reply / The ARP reply
  • cache / The ARP cache
• ARP cache
  • about / The ARP cache
• ARP reply
  • about / The ARP reply
• ARP request
  • about / The ARP request
• ARP spoofing
  • about / Introducing ARP spoofing and implementing it using Python
  • implementing, with Python / Introducing ARP spoofing and implementing it using Python
• ASP.NET / Checking the HTTP header

B

• BeautifulSoup
  • URL / Information gathering of a website from SmartWhois by the parser BeautifulSoup
• BeautifulSoup parser
  • used, for website information gathering from SmartWhois / Information gathering of a website from SmartWhois by the parser BeautifulSoup
• black-box pen testing / Approaches to pentesting
• blind SQL injection / Blind SQL injection

C

• CAM
  • about / The MAC flooding attack
• CAM tables
  • switches, using / How the switch uses the CAM tables
• client-side parameter, by Python
  • tampering / Tampering with the client-side parameter with Python
• client-side parameter tampering
  • effects, on business / Effects of parameter tampering on business
• client-side validation
  • about / Introducing client-side validation
• clients, AP
  • detecting / Detecting clients of an AP
• client socket methods
  • about / Client socket methods
  • socket.connect(address) / Client socket methods
• custom packet crafting
  • used, for testing security system / Testing the security system using custom packet crafting and injection

D

• DDoS
  • about / Introducing DoS and DDoS
  • single IP, using with single port address / Single IP single port
  • single IP, using with multiple ports / Single IP multiple port
  • multiple IP, using with multiple ports / Multiple IP multiple port
• deauthentication (deauth) attacks
  • about / The deauthentication (deauth) attacks
• del() function / How to create an efficient port scanner
• Denial of Service (DoS) attack / Defining the scope of pentesting
• destructive test / Defining the scope of pentesting
• DoS
  • about / Introducing DoS and DDoS
  • single IP, using with single port address / Single IP single port
  • single IP, using with multiple ports / Single IP multiple port
  • multiple IP, using with multiple ports / Multiple IP multiple port
  • detecting / Detection of DDoS

F

• FIN scan / The FIN scan
• firewall-based website
  • Python program, creating / Understanding the SQL injection attack by a Python script
• foot printing
  • web server / The concept of foot printing of a web server
• format characters / Format characters
• fully qualified domain name (FQDN) / Useful socket methods

G

• general socket methods
  • socket.recv(bufsize) / General socket methods
  • socket.recvfrom(bufsize) / General socket methods
  • socket.recv_into(buffer) / General socket methods
  • socket.recvfrom_into(buffer) / General socket methods
  • socket.send(bytes) / General socket methods
  • socket.sendto(data, address) / General socket methods
  • socket.sendall(data) / General socket methods
• GETmethod / Tampering with the client-side parameter with Python, Effects of parameter tampering on business
• gray-box pen testing / Approaches to pentesting

H

• HackThisSite
  • URL / Information gathering of a website from SmartWhois by the parser BeautifulSoup
• half open scan (stealth scan) / A half-open scan
  • steps / A half-open scan
  • about / A half-open scan
• Hping / A half-open scan
• HTTP banner grabbing
  • of website / Banner grabbing of a website
• HTTP header
  • checking / Checking the HTTP header

I

• ICMP ECHO Reply / How to check live systems in a network and the concept of a live system
• ICMP ECHO Request / How to check live systems in a network and the concept of a live system
• IIS 6.0 / Checking the HTTP header
• information gathering
  • about / Introducing information gathering
  • HTTP header, checking / Checking the HTTP header
• injection
  • used, for testing security system / Testing the security system using custom packet crafting and injection
• Intrusion Detection System (IDS) / The FIN scan
• IP scanner
  • creating / How to create an efficient IP scanner

J

• Juggyboy
  • URL / Checking the HTTP header

L

• live system
  • checking, in network / How to check live systems in a network and the concept of a live system
  • ping sweep / Ping sweep
  • IP scanner, creating / How to create an efficient IP scanner

M

• MAC flooding attack
  • about / The MAC flooding attack
  • MAC flood logic / The MAC flood logic
• MAC flood logic / The MAC flood logic
• mechanize, Python browser / Tampering with the client-side parameter with Python
• Mozilla add-on Tamper Data
  • URL / Effects of parameter tampering on business
• mysql_real_escape_string()function / Understanding the SQL injection attack by a Python script

N

• network disassociation
  • about / Network disassociation
• Network or IP layer / Format characters
• network sniffer
  • about / Introducing a network sniffer
  • implementing, with Python / Implementing a network sniffer using Python, Format characters
  • format characters / Format characters
• Network Sockets
  • about / Network sockets
• non-destructive test / Defining the scope of pentesting
• nonpersistent (reflected) XSS / Nonpersistent or reflected XSS

O

• order by query / Understanding the SQL injection attack by a Python script
• OS fingerprinting / Banner grabbing of a website

P

• packet crafting
  • about / Learning about packet crafting
• passive sniffing / Passive sniffing
• pen tester
  • qualities / Qualities of a good pentester
• pen testing
  • scope / Introducing the scope of pentesting
  • need for / The need for pentesting
  • components, to be tested / Components to be tested
  • scope, defining / Defining the scope of pentesting
  • non-destructive test / Defining the scope of pentesting
  • destructive test / Defining the scope of pentesting
  • approaches / Approaches to pentesting
  • prerequisites tools / Understanding the tests and tools you'll need
• persistent (stored) XSS / Persistent or stored XSS
• PF_PACKET / Format characters
• Physical layer / Format characters
• ping command / How to check live systems in a network and the concept of a live system
• ping of death / Ping of death
• ping sweep
  • about / Ping sweep
• port scanner
  • about / The concept of a port scanner
  • creating / How to create an efficient port scanner
• POSTmethod / Tampering with the client-side parameter with Python
• Python
  • URL, for downloading versions / Introducing Python scripting
  • testing platforms / Learning the common testing platforms with Python
  • used, for implementing network sniffer / Implementing a network sniffer using Python, Format characters
  • used, for implementing ARP spoofing / Introducing ARP spoofing and implementing it using Python
  • wireless SSID finding / Wireless SSID finding and wireless traffic analysis by Python
  • wireless traffic analysis / Wireless SSID finding and wireless traffic analysis by Python
  • client-side parameter, tampering / Tampering with the client-side parameter with Python
• Python script
  • used, for implementing TCP scan / The TCP scan concept and its implementation using a Python script
  • SQL injection attack / Understanding the SQL injection attack by a Python script
• Python scripting
  • about / Introducing Python scripting

R

• raw socket / Format characters

S

• scapy
  • about / A half-open scan
• security system
  • testing, with injection / Testing the security system using custom packet crafting and injection
  • testing, with custom packet crafting / Testing the security system using custom packet crafting and injection
• server-side program
  • creating, for client connection / Moving on to the practical
• server socket methods
  • about / Server socket methods
  • socket.bind(address) / Server socket methods
  • socket.listen(q) / Server socket methods
  • socket.accept() / Server socket methods
• simple SQL injection / Simple SQL injection
• SmartWhois
  • website information, gathering by parser BeautifulSoup / Information gathering of a website from SmartWhois by the parser BeautifulSoup
  • URL / Information gathering of a website from SmartWhois by the parser BeautifulSoup
• sniffing process
  • about / Introducing a network sniffer
  • passive sniffing / Passive sniffing
  • active sniffing / Active sniffing
• socket.accept() method / Server socket methods
• socket.connect(address) method / Client socket methods
• socket.connect_ex(address) method / Useful socket methods
• socket.getfqdn([name]) method / Useful socket methods
• socket.gethostbyaddr(ip_address) method / Useful socket methods
• socket.gethostbyname(hostname) method / Useful socket methods
• socket.gethostbyname_ex(name) method / Useful socket methods
• socket.gethostname() method / Useful socket methods
• socket.getservbyname(servicename[, protocol_name]) method / Useful socket methods
• socket.getservbyport(port[, protocol_name]) method / Useful socket methods
• socket.htonl(x) method / Format characters
• socket.htons(x) method / Format characters
• socket.listen(q) method / Server socket methods
• socket.ntohl(x) method / Format characters
• socket.ntohs(x) method / Format characters
• socket.recv(bufsize) method / General socket methods
• socket.recvfrom_into(buffer) method / General socket methods
• socket.recv_into(buffer) method / General socket methods
• socket.send(bytes) method / General socket methods
• socket.sendall(data) method / General socket methods
• socket.sendto(data, address) method / General socket methods
• socket.setdefaulttimeout(1) method / How to create an efficient port scanner
• socket.socket() function / Network sockets
• socket exceptions
  • handling / Socket exceptions
  • exception socket.herror / Socket exceptions
  • exception socket.timeout / Socket exceptions
  • exception socket.gaierror / Socket exceptions
  • exception socket.error / Socket exceptions
• socket methods
  • socket.gethostbyname(hostname) / Useful socket methods
  • socket.gethostbyname_ex(name) / Useful socket methods
  • socket.gethostname() / Useful socket methods
  • socket.getfqdn([name]) / Useful socket methods
  • socket.gethostbyaddr(ip_address) / Useful socket methods
  • socket.getservbyname(servicename[, protocol_name]) / Useful socket methods
  • socket.getservbyport(port[, protocol_name]) / Useful socket methods
  • socket.connect_ex(address) / Useful socket methods
• SQL injection / Introducing the SQL injection attack
• SQL injection attack
  • about / Introducing the SQL injection attack
  • types / Types of SQL injections
  • by Python script / Understanding the SQL injection attack by a Python script
• SQL injection attack, types
  • simple SQL injection attack / Simple SQL injection
  • blind SQL injection / Blind SQL injection
• sqlmap tool / Understanding the SQL injection attack by a Python script

T

• target machine
  • running services / What are the services running on the target machine?
  • port scanner / The concept of a port scanner
  • port scanner, creating / How to create an efficient port scanner
• TCP header / Format characters
• TCP scan
  • about / The TCP scan concept and its implementation using a Python script
  • implementing, by Python script / The TCP scan concept and its implementation using a Python script
• testing platforms, with Python / Learning the common testing platforms with Python
• threading.activeCount() method / How to create an efficient port scanner

U

• union query / Understanding the SQL injection attack by a Python script
• update() function / How to create an efficient port scanner
• urllib library
  • URL / Understanding the SQL injection attack by a Python script

W

• web server
  • foot printing / The concept of foot printing of a web server
  • hardening / Hardening of a web server
• website
  • HTTP banner grabbing / Banner grabbing of a website
• white-box pen testing / Approaches to pentesting
• wireless attacks
  • about / Wireless attacks
  • deauthentication (deauth) attacks / The deauthentication (deauth) attacks
  • MAC flooding attack / The MAC flooding attack
• wireless SSID finding
  • performing, by Python / Wireless SSID finding and wireless traffic analysis by Python
• wireless traffic analysis
  • performing, by Python / Wireless SSID finding and wireless traffic analysis by Python

X

• XSS
  • about / Learning about Cross-Site scripting
  • types / Learning about Cross-Site scripting
  • persistent (stored) XSS) / Persistent or stored XSS
  • nonpersistent (reflected) XSS / Nonpersistent or reflected XSS