You're reading from Mastering Python for Networking and Security Leverage the scripts and libraries of Python version 3.7 and beyond to overcome networking and security issues

Product type Paperback

Published in Jan 2021

Publisher Packt

ISBN-13 9781839217166

Length 538 pages

Edition 2nd Edition

Languages

Python

Tools

Tor

Concepts

Network Security

Author (1):

José Manuel Ortega

View More author details

Table of Contents (22) Chapters

Preface

1. Section 1: The Python Environment and System Programming Tools

2. Chapter 1: Working with Python Scripting FREE CHAPTER

3. Chapter 2: System Programming Packages

4. Section 2: Network Scripting and Extracting Information from the Tor Network with Python

5. Chapter 3: Socket Programming

6. Chapter 4: HTTP Programming

7. Chapter 5: Connecting to the Tor Network and Discovering Hidden Services

8. Section 3: Server Scripting and Port Scanning with Python

9. Chapter 6: Gathering Information from Servers

10. Chapter 7: Interacting with FTP, SFTP, and SSH Servers

11. Chapter 8: Working with Nmap Scanner

12. Section 4: Server Vulnerabilities and Security in Python Modules

13. Chapter 9: Interacting with Vulnerability Scanners

14. Chapter 10: Identifying Server Vulnerabilities in Web Applications

15. Chapter 11: Security and Vulnerabilities in Python Modules

16. Section 5: Python Forensics

17. Chapter 12: Python Tools for Forensics Analysis

18. Chapter 13: Extracting Geolocation and Metadata from Documents, Images, and Browsers

19. Chapter 14: Cryptography and Steganography

20. Assessments

21. Other Books You May Enjoy

Leave a review - let other readers know what you think

Scanning TLS/SSL configurations with SSLyze

SSLyze is a Python tool that works with Python 3.6+ and analyzes the SSL configuration of a server to detect issues including bad certificates and dangerous cipher suites.

This tool is available on the Pypi repository (https://pypi.org/project/SSLyze) and you can install it from source code or with the pip install sslyze command.

We can access the SSLyze project on GitHub (https://github.com/nabla-c0d3/sslyze), where we will find the source code of the tool, as well as the official documentation (https://nabla-c0d3.github.io/sslyze/documentation).

The SSLyze tool allows you to analyze the SSL configuration of the server, validate the certificates of the site, as well as obtain information about the encryption algorithms that the server is using.

These are the options that the script provides:

Figure 10.11 – The ssllabs service report

One of the options it provides is HeartbleedPlugin to detect this...