Packt+ | Advance your knowledge in tech

You're reading from Effective Python Penetration Testing Pen test your system like a pro and overcome vulnerabilities by leveraging Python scripts, libraries, and tools

Product type Paperback

Published in Jun 2016

Publisher Packt

ISBN-13 9781785280696

Length 164 pages

Edition 1st Edition

Languages

Python

Concepts

Penetration Testing

Author (1):

Rejah Rehim

View More author details

Table of Contents (11) Chapters

Preface

What this book covers
What you need for this book
Who this book is for
Conventions
Reader feedback
Customer support

1. Python Scripting Essentials FREE CHAPTER

Setting up the scripting environment
Installing third-party libraries
Python language essentials
Summary

2. Analyzing Network Traffic with Scapy

Sockets modules
Raw socket programming
Investigate network traffic with Scapy
Summary

3. Application Fingerprinting with Python

Web scraping
Parsing HTML with lxml
OS fingerprinting
Get the EXIF data of an image
Web application fingerprinting
Summary

4. Attack Scripting with Python

Injections
Broken authentication
Cross-site scripting (XSS)
Insecure direct object references
Security misconfiguration
Sensitive data exposure
Missing function level access control
CSRF attacks
Using components with known vulnerabilities
Unvalidated redirects and forwards
Summary

5. Fuzzing and Brute-Forcing

Fuzzing
Classification of fuzzers
Fuzzing and brute-forcing passwords
Dictionary attack
SSH brute-forcing
SMTP brute-forcing
Brute-forcing directories and file locations
Brute-force cracking password protected ZIP files
Summary

6. Debugging and Reverse Engineering

Reverse engineering
Portable executable analysis
Listing all imported and exported symbols
Disassembling with Capstone
PEfile with Capstone
Debugging
Using PyDBG
Summary

7. Crypto, Hash, and Conversion Functions

Cryptographic algorithms
Hash functions
Summary

8. Keylogging and Screen Grabbing

Keyloggers
Keyloggers with pyhook
Screen grabbing
Summary

9. Attack Automation

Paramiko
python-nmap
W3af REST API
Metasploit scripting with MSGRPC
ClamAV antivirus with Python
OWASP ZAP from Python
Accessing Nessus 6 API with Python
Summary

10. Looking Forward

Pentestly
Twisted
Nscan
sqlmap
CapTipper
Immunity Debugger
pytbull
ghost.py
peepdf
Summary

ghost.py

ghost.py is scriptable web client written in Python for webkit.

Tip

Read more on ghost.py at, http://jeanphix.me/Ghost.py.

The rest of the chapter is locked

You're reading from Effective Python Penetration Testing Pen test your system like a pro and overcome vulnerabilities by leveraging Python scripts, libraries, and tools

Table of Contents (11) Chapters

ghost.py

Tip

Authors (1)

Personalised recommendations for you

You're reading from Effective Python Penetration Testing Pen test your system like a pro and overcome vulnerabilities by leveraging Python scripts, libraries, and tools

Table of Contents (11) Chapters

ghost.py

Tip

Unlock this book and the full library FREE for 7 days

Authors (1)

Personalised recommendations for you