Book Image

Python Penetration Testing Cookbook

By : Rejah Rehim
Book Image

Python Penetration Testing Cookbook

By: Rejah Rehim

Overview of this book

Penetration testing is the use of tools and code to attack a system in order to assess its vulnerabilities to external threats. Python allows pen testers to create their own tools. Since Python is a highly valued pen-testing language, there are many native libraries and Python bindings available specifically for pen-testing tasks. Python Penetration Testing Cookbook begins by teaching you how to extract information from web pages. You will learn how to build an intrusion detection system using network sniffing techniques. Next, you will find out how to scan your networks to ensure performance and quality, and how to carry out wireless pen testing on your network to avoid cyber attacks. After that, we’ll discuss the different kinds of network attack. Next, you’ll get to grips with designing your own torrent detection program. We’ll take you through common vulnerability scenarios and then cover buffer overflow exploitation so you can detect insecure coding. Finally, you’ll master PE code injection methods to safeguard your network.
Table of Contents (15 chapters)

FIN scanning

SYN scanning can be blocked by firewalls. However, packets with the FIN flag set have the ability to bypass firewalls. Here is how it works--for a FIN packet, the closed ports reply with an RST packet, whereas the open ports ignore the packets. If it's an ICMP packet with type 3, and code 1, 2, 3, 9, 10, or 13, we may infer that the port is filtered and the port state cannot be found. We can use Scapy to create the FIN packet and scan the ports.

How to do it...

We can create a FIN scanner as following:

  1. As we did in the previous recipe, we have to create another file, fin-scanner.py, and open it in our editor.
  2. Then import the required module:
from scapy.all import * 
  1. As we did for the SYN scanner, set...