CSRF is an attack with the help of which an attacker exploits a valid user session in a manner that allows certain actions to be performed on the behalf of currently logged-in user. For example, let's say an admin user is logged into the application and has a valid session cookie set at the browser. There is an option for the admin to delete all users from website by clicking the delete all button, which internally invokes the HTTP request http://www.mysite.com/delete?users=all. One of the properties of the web browser to send the session parameters/cookies to the server for every subsequent request after the user has logged in to the application. This can be exploited by the attacker by crafting a fake page that has an HTML image, such as <img src"http://www.mysite.com/delete?users=all" style="display:hidden">. The attacker can send the link...
Hands-On Penetration Testing with Python
By :
Hands-On Penetration Testing with Python
By:
Overview of this book
With the current technological and infrastructural shift, penetration testing is no longer a process-oriented activity. Modern-day penetration testing demands lots of automation and innovation; the only language that dominates all its peers is Python. Given the huge number of tools written in Python, and its popularity in the penetration testing space, this language has always been the first choice for penetration testers.
Hands-On Penetration Testing with Python walks you through advanced Python programming constructs. Once you are familiar with the core concepts, you’ll explore the advanced uses of Python in the domain of penetration testing and optimization. You’ll then move on to understanding how Python, data science, and the cybersecurity ecosystem communicate with one another. In the concluding chapters, you’ll study exploit development, reverse engineering, and cybersecurity use cases that can be automated with Python.
By the end of this book, you’ll have acquired adequate skills to leverage Python as a helpful tool to pentest and secure infrastructure, while also creating your own custom exploits.
Related Content you might be interested in
Current Title:
Hands-On Penetration Testing with Python
Table of Contents (18 chapters)
Preface
Free Chapter
Introduction to Python
Building Python Scripts
Concept Handling
Advanced Python Modules
Vulnerability Scanner Python - Part 1
Vulnerability Scanner Python - Part 2
Machine Learning and Cybersecurity
Automating Web Application Scanning - Part 1
Automated Web Application Scanning - Part 2
Building a Custom Crawler
Reverse Engineering Linux Applications
Reverse Engineering Windows Applications
Exploit Development
Cyber Threat Intelligence
Other Wonders of Python
Assessments
Other Books You May Enjoy
Customer Reviews