Summary
The analysis of vulnerabilities in web applications is currently the best field in which to perform security audits. One of the objectives of this chapter was to learn about the tools in the Python ecosystem that allow us to identify server vulnerabilities in web applications such as SQLmap. The main vulnerabilities analyzed were XSS and SQL injection. In the SQL injection section, we covered a number of tools for detecting this kind of vulnerability, including SQLmap and Nmap scripts. Finally, we reviewed how to detect vulnerabilities related to SSL/TLS protocols in web servers.
In this chapter, we have learned the main vulnerabilities that we can find in a website and how, with the help of automatic tools and Python scripts, we can detect some of them. In addition, you have learned how to detect configuration errors in a server that can affect the security of the site and that can be exploited by an attacker.
In the next chapter, we will explore programming packages...