Summary
The analysis of vulnerabilities in web applications is currently the best field in which to perform security audits. One of the objectives of this chapter was to learn about the tools in the Python ecosystem that allow us to identify server vulnerabilities in web applications such as sqlmap. The main vulnerabilities analyzed were XSS and SQL injection. In the SQL injection section, we covered several tools for detecting this kind of vulnerability, including sqlmap and Nmap scripts. Finally, we reviewed how to detect vulnerabilities in web applications with tools like Oralyzer and Fuxploider.
In this chapter, we learned about the main vulnerabilities that we can find in a website and how, with the help of automatic tools and Python scripts, we can detect some of them. In addition, you learned how to detect configuration errors in a server that can affect the security of the site and that can be exploited by an attacker.
In the next chapter, we will review how to get...
