Book Image

Python Penetration Testing Essentials - Second Edition

By : Mohit Raj
Book Image

Python Penetration Testing Essentials - Second Edition

By: Mohit Raj

Overview of this book

This book gives you the skills you need to use Python for penetration testing (pentesting), with the help of detailed code examples. We start by exploring the basics of networking with Python and then proceed to network hacking. Then, you will delve into exploring Python libraries to perform various types of pentesting and ethical hacking techniques. Next, we delve into hacking the application layer, where we start by gathering information from a website. We then move on to concepts related to website hacking—such as parameter tampering, DDoS, XSS, and SQL injection. By reading this book, you will learn different techniques and methodologies that will familiarize you with Python pentesting techniques, how to protect yourself, and how to create automated programs to find the admin console, SQL injection, and XSS attacks.
Table of Contents (11 chapters)

Summary

At the beginning of this chapter, we learned about the concept of a sniffer, and the use of a sniffer over the network, which at times might reveal big secrets, such as passwords and chats. In today's world, switches are mostly used, so you should know how to perform active sniffing. We also learned how to make up a layer-4 sniffer. Then we learned how to perform ARP spoofing. You should test the network by ARP spoofing and write your findings in the report. Then, we looked at the topic of testing the network by using custom packets. The network disassociation attack is similar to the ARP cache poisoning attack, which was also explained. Half-open, FIN scan, and ACK flag scans are special types of scanning that we touched upon too. Lastly, ping of death, which is related to the DDOS attack, was explained.

In Chapter 4, Network Attacks and Prevention, we will learn...