When we talk about web application scanning, there are various attack vectors that come to mind, such as SQL injection, XSS, CSRF, LFI, and RFI. The tool that we might think of when we talk about web application testing is the Burp Suite. In this chapter, we are going to study how we can use Python in order to try and automate web application attack vector detection. We will also look at how Python can be used to automate Burp scanning in order to cover the vulnerabilities that we would otherwise have to discover manually. In this chapter, we are going to look at the following topics:
- Automating web application scanning with Burp Suite
- Burp automation with Python
- SQL injection
- Automatic detection of SQL injection with Python
