Book Overview & Buying
Table Of Contents
Feedback & Rating

Python Penetration Testing Essentials

By : Mohit Raj

3.2 (10)

Buy this Book

Python Penetration Testing Essentials

3.2 (10)

By: Mohit Raj

Buy this Book

Overview of this book

This book gives you the skills you need to use Python for penetration testing (pentesting), with the help of detailed code examples. We start by exploring the basics of networking with Python and then proceed to network hacking. Then, you will delve into exploring Python libraries to perform various types of pentesting and ethical hacking techniques. Next, we delve into hacking the application layer, where we start by gathering information from a website. We then move on to concepts related to website hacking—such as parameter tampering, DDoS, XSS, and SQL injection. By reading this book, you will learn different techniques and methodologies that will familiarize you with Python pentesting techniques, how to protect yourself, and how to create automated programs to find the admin console, SQL injection, and XSS attacks.

Preface

Who this book is for

What this book covers

To get the most out of this book

Get in touch

Free Chapter

Python with Penetration Testing and Networking

Introducing the scope of pentesting

Approaches to pentesting

Introducing Python scripting

Understanding the tests and tools you'll need

Learning the common testing platforms with Python

Network sockets

Summary

Scanning Pentesting

How to check live systems in a network and the concept of a live system

What are the services running on the target machine?

Summary

Sniffing and Penetration Testing

Introducing a network sniffer

Implementing a network sniffer using Python

Learning about packet crafting

Introducing ARP spoofing and implementing it using Python

Testing the security system using custom packet crafting

Summary

Network Attacks and Prevention

Technical requirements

DHCP starvation attack

The MAC flooding attack

Gateway disassociation by RAW socket

Torrent detection

Summary

Wireless Pentesting

Introduction to 802.11 frames

Wireless SSID finding and wireless traffic analysis with Python

Wireless attacks

Summary

Honeypot – Building Traps for Attackers

Technical requirements

Fake ARP reply

Fake ping reply

Fake port-scanning reply

Fake OS-signature reply to nmap

Fake web server reply

Summary

Foot Printing a Web Server and a Web Application

The concept of foot printing a web server

Introducing information gathering

Information gathering of a website from whois.domaintools.com

Email address gathering from a web page

Banner grabbing of a website

Hardening of a web server

Summary

Client-Side and DDoS Attacks

Introducing client-side validation

Tampering with the client-side parameter with Python

Effects of parameter tampering on business

Introducing DoS and DDoS

Summary

Pentesting SQL and XSS

Introducing the SQL injection attack

Types of SQL injections

Understanding the SQL injection attack by a Python script

Learning about cross-site scripting

Summary

Other Books You May Enjoy

Leave a review - let other readers know what you think

Customer Reviews

3.2 (10)

5 star

20%

4 star

30%

3 star

20%

2 star

10%

1 star

20%

Effects of parameter tampering on business

As a pentester, you will often have to analyze the source code. These days, the world of e-commerce is growing quickly. Consider an example of an e-commerce website, as shown in the following screenshot:

Example of a website

The preceding screenshot shows that the price of a Nokia C7 is 60 and the price of an iPhone 3G is 600. You do not know whether these prices came from the database or if they are written in the web page. The following screenshot shows the price of both mobiles:

View source code

Now, let's look at the source code, as shown in the following screenshot:

Look at the rectangular boxes in the preceding screenshot. The price 60 is written in the web page, but the price 600 is taken from the database. The price 60 can be changed by URL tampering if the GET method is used. The price can be changed to 6 instead of 60...