Python Penetration Testing Cookbook

By : Rejah Rehim

Python Penetration Testing Cookbook

By: Rejah Rehim

Overview of this book

Penetration testing is the use of tools and code to attack a system in order to assess its vulnerabilities to external threats. Python allows pen testers to create their own tools. Since Python is a highly valued pen-testing language, there are many native libraries and Python bindings available specifically for pen-testing tasks. Python Penetration Testing Cookbook begins by teaching you how to extract information from web pages. You will learn how to build an intrusion detection system using network sniffing techniques. Next, you will find out how to scan your networks to ensure performance and quality, and how to carry out wireless pen testing on your network to avoid cyber attacks. After that, we’ll discuss the different kinds of network attack. Next, you’ll get to grips with designing your own torrent detection program. We’ll take you through common vulnerability scenarios and then cover buffer overflow exploitation so you can detect insecure coding. Finally, you’ll master PE code injection methods to safeguard your network.

Preface

What this book covers

What you need for this book

Free Chapter

Why Python in Penetration Testing?

Introduction

Why Python is a great option for security scripting

Python 3 language basics and differences

Setting Up a Python Environment

Introduction

Setting up a Python environment in Linux

Setting up a Python environment in macOS

Setting up a Python environment in Windows

Web Scraping with Python

Introduction

Download web pages with Python scripts

Changing the user agent

Downloading files

Using a regular expression to get the information from the downloaded web pages

Requesting and downloading dynamic website pages

Dynamic GET requests

Data Parsing with Python

Introduction

Parsing HTML tables

Extracting data from HTML documents

Parsing XML data

Web Scraping with Scrapy and BeautifulSoup

Introduction

Web spiders with Scrapy

Scrapy shell

Link extractor with Scrapy

Scraping after logging into websites using Scrapy

Network Scanning with Python

Introduction

Simple port scanner

IP range/network scanner

LanScan

Network Sniffing with Python

Introduction

Packet sniffer in Python

Parsing the packet

PyShark

Scapy Basics

Introduction

Creating a packet with Scapy

Sending and receiving packets with Scapy

Layering packets

Reading and writing to pcap files

Sniffing packets

ARP man-in-the-middle tool with Scapy

Wi-Fi Sniffing

Introduction

Finding Wi-Fi devices

Getting ready

Finding SSIDs

Exposing hidden SSIDs

Dictionary attack on hidden SSIDs

Fake access points with Scapy

Layer 2 Attacks

ARP spoofing over VLAN hopping

TCP/IP Attacks

Password sniffer with Python over LAN

Introduction to Exploit Development

Introduction

Memory dump

CPU instructions

Windows Exploit Development

Introduction

Windows memory layout

Buffer overflow with saved return pointer overwrite

Structured Exception Handling

Egg hunters

Linux Exploit Development

Introduction

Format string exploitation

Buffer overflow

Customer Reviews

5 star

4 star

3 star

2 star

1 star

Password sniffer with Python over LAN

We have already learned how to sniff packets with Scapy in the previous recipes. Now we can use Scapy to sniff and extract the content in the packets. This can be used to get the details of many protocols. We can try to get the credentials from these sniffed packets. We can bind this sniffer with our ARP poisoning attack to get the details from other machines on the network.

How to do it...

Here are the steps to write a password sniffer over LAN:

Create a pass-sniffer.py file and open it in your editor.
Import the required modules:

from scapy.all import *
from urllib import parse

Now declare the variables for the interface:

iface = "en0"
conf.verb=0

Create a method to...

Python Penetration Testing Cookbook

By : Rejah Rehim

Python Penetration Testing Cookbook

By: Rejah Rehim

Overview of this book

Related Content you might be interested in

Current Title:

Python Penetration Testing Cookbook

Penetration Testing with Shellcode

Python Penetration Testing Essentials

Offensive Shellcode from Scratch.