Book Image

Learning Penetration Testing with Python

By : Christopher Duffy
Book Image

Learning Penetration Testing with Python

By: Christopher Duffy

Overview of this book

Related Content you might be interested in

Current Title:

Small book image
Learning Penetration Testing with Python
Christopher Duffy
Sep, 2015 | 314 pages
No titles found
Table of Contents (19 chapters)
Learning Penetration Testing with Python
Learning Penetration Testing with Python
Credits
Credits
Disclaimer
Disclaimer
About the Author
About the Author
Acknowlegements
Acknowlegements
About the Reviewers
About the Reviewers
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Understanding the Penetration Testing Methodology
Understanding the Penetration Testing Methodology
An overview of penetration testing
Understanding what penetration testing is not
Assessment methodologies
The penetration testing execution standard
Penetration testing tools
Summary
2
The Basics of Python Scripting
The Basics of Python Scripting
Understanding the difference between interpreted and compiled languages
Python – the good and the bad
A Python interactive interpreter versus a script
Environmental variables and PATH
Understanding dynamically typed languages
The first Python script
Developing scripts and identifying errors
Python formatting
Python variables
Operators
Compound statements
Functions
The Python style guide
Arguments and options
Your first assessor script
Summary
3
Identifying Targets with Nmap, Scapy, and Python
Identifying Targets with Nmap, Scapy, and Python
Understanding how systems communicate
Understanding Nmap
Nmap libraries for Python
The Scapy library for Python
Summary
4
Executing Credential Attacks with Python
Executing Credential Attacks with Python
The types of credential attacks
Identifying the target
Creating targeted usernames
Testing for users using SMTP VRFY
Summary
5
Exploiting Services with Python
Exploiting Services with Python
Understanding the new age of service exploitation
Understanding the chaining of exploits
Automating the exploit train with Python
Summary
6
Assessing Web Applications with Python
Assessing Web Applications with Python
Identifying live applications versus open ports
Identifying hidden files and directories with Python
Credential attacks with Burp Suite
Using twill to walk through the source
Understanding when to use Python for web assessments
Summary
7
Cracking the Perimeter with Python
Cracking the Perimeter with Python
Understanding today's perimeter
Understanding the link between accounts and services
Cracking inboxes with Burp Suite
Identifying the attack path
Gaining access through websites
Summary
8
Exploit Development with Python, Metasploit, and Immunity
Exploit Development with Python, Metasploit, and Immunity
Getting started with registers
Understanding the Windows memory structure
Understanding memory addresses and endianness
Understanding the manipulation of the stack
Understanding immunity
Understanding basic buffer overflow
Writing a basic buffer overflow exploit
Understanding stack adjustments
Understanding the purpose of local exploits
Understanding other exploit scripts
Reversing Metasploit modules
Understanding protection mechanisms
Summary
9
Automating Reports and Tasks with Python
Automating Reports and Tasks with Python
Understanding how to parse XML files for reports
Understanding how to create a Python class
Summary
10
Adding Permanency to Python Tools
Adding Permanency to Python Tools
Understanding logging within Python
Understanding the difference between multithreading and multiprocessing
Building industry-standard tools
Summary
Index
Index

Acknowlegements

This book is for my wife, Michelle, who has enabled me to better our family and chase my dreams.

For my children, Alexis and Maxwell, whom I hope to build a better future for.

For my Dad for teaching me to lead from the front and introducing the digital world to us, first with a Wang Mainframe and then teaching me how to create hacks for game startup scripts, discovering Bulletin Board Systems (BBS) preWorld Wide Web (WWW) with ProComm Plus and war dialing.

For my Mom, who forced me to stop and smell the roses. She provided me that giant help of encouragement whenever it seemed most appropriate.

Finally, for my friend, Chris Newton, who provided me valuable feedback with regards to what he was looking for in a book like this, and gave me access to his Cisco lab.

Previous Section
Next Chapter