Book Image

Python Penetration Testing Essentials - Second Edition

By : Mohit Raj
Book Image

Python Penetration Testing Essentials - Second Edition

By: Mohit Raj

Overview of this book

This book gives you the skills you need to use Python for penetration testing (pentesting), with the help of detailed code examples. We start by exploring the basics of networking with Python and then proceed to network hacking. Then, you will delve into exploring Python libraries to perform various types of pentesting and ethical hacking techniques. Next, we delve into hacking the application layer, where we start by gathering information from a website. We then move on to concepts related to website hacking—such as parameter tampering, DDoS, XSS, and SQL injection. By reading this book, you will learn different techniques and methodologies that will familiarize you with Python pentesting techniques, how to protect yourself, and how to create automated programs to find the admin console, SQL injection, and XSS attacks.
Table of Contents (11 chapters)

DHCP starvation attack

Before we jump to the attack, let's see how the DHCP server works. When you connect to a network via a switch (access point), your machine automatically gets the IP address of the network. You might be wondering where your machine got the IP from. These configurations come from the DHCP server, configured for the network. The DHCP server gives four things: the IP address, subnet mask, gateway address, and DNS server address. But if you analyze carefully, the DHCP server also gives you lease for allocate IP address. Type the ipconfig/all command in the Windows Command Prompt. Lease obtained and the lease expires are highlighted in the following screenshot:

You can see DHCP lease in the rectangle. In this attack, we will send a fake request to the DHCP server. The DHCP server allocates the IPs with a Lease to the fake request. In this way, we will finish...