Python Web Penetration Testing Cookbook

¡ Packt Publishing Ltd
ā§Ē.ā§Ļ
ā§¨ āĻŸāĻž āĻĒā§°ā§āĻ¯āĻžāĻ˛ā§‹āĻšāĻ¨āĻž
āĻ‡āĻŦā§āĻ•
224
āĻĒā§ƒāĻˇā§āĻ āĻž
āĻŽā§‚āĻ˛ā§āĻ¯āĻžāĻ‚āĻ•āĻ¨ āĻ†ā§°ā§ āĻĒā§°ā§āĻ¯āĻžāĻ˛ā§‹āĻšāĻ¨āĻž āĻ¸āĻ¤ā§āĻ¯āĻžāĻĒāĻ¨ āĻ•ā§°āĻž āĻšā§‹ā§ąāĻž āĻ¨āĻžāĻ‡  āĻ…āĻ§āĻŋāĻ• āĻœāĻžāĻ¨āĻ•

āĻāĻ‡ āĻ‡āĻŦā§āĻ•āĻ–āĻ¨ā§° āĻŦāĻŋāĻˇā§Ÿā§‡

This book gives you an arsenal of Python scripts perfect to use or to customize your needs for each stage of the testing process. Each chapter takes you step by step through the methods of designing and modifying scripts to attack web apps. You will learn how to collect both open and hidden information from websites to further your attacks, identify vulnerabilities, perform SQL Injections, exploit cookies, and enumerate poorly configured systems. You will also discover how to crack encryption, create payloads to mimic malware, and create tools to output your findings into presentable formats for reporting to your employers.

āĻŽā§‚āĻ˛ā§āĻ¯āĻžāĻ‚āĻ•āĻ¨ āĻ†ā§°ā§ āĻĒā§°ā§āĻ¯āĻžāĻ˛ā§‹āĻšāĻ¨āĻžāĻ¸āĻŽā§‚āĻš

ā§Ē.ā§Ļ
ā§¨ āĻŸāĻž āĻĒā§°ā§āĻ¯āĻžāĻ˛ā§‹āĻšāĻ¨āĻž

āĻ˛āĻŋāĻ–āĻ•ā§° āĻŦāĻŋāĻˇāĻ¯āĻŧā§‡

Cameron Buchanan is a penetration tester by trade and a writer in his spare time. He has performed penetration tests around the world for a variety of clients across many industries. Previously, he was a member of the RAF. In his spare time, he enjoys doing stupid things, such as trying to make things fly, getting electrocuted, and dunking himself in freezing cold water. He is married and lives in London.

Terry Ip is a security consultant. After nearly a decade of learning how to support IT infrastructure, he decided that it would be much more fun learning how to break it instead. He is married and lives in Buckinghamshire, where he tends to his chickens.

Andrew Mabbitt is a penetration tester living in London, UK. He spends his time beating down networks, mentoring, and helping newbies break into the industry. In his free time, he loves to travel, break things, and master the art of sarcasm.

Benjamin May is a security test engineer from Cambridge. He studied computing for business at Aston University. With a background in software testing, he recently combined this with his passion for security to create a new role in his current company. He has a broad interest in security across all aspects of the technology field, from reverse engineering embedded devices to hacking with Python and participating in CTFs. He is a husband and a father.

Dave Mound is a security consultant. He is a Microsoft Certified Application Developer but spends more time developing Python programs these days. He has been studying information security since 1994 and holds the following qualifications: C|EH, SSCP, and MCAD. He recently studied for OSCP certification but is still to appear for the exam. He enjoys talking and presenting and is keen to pass on his skills to other members of the cyber security community. When not attached to a keyboard, he can be found tinkering with his 1978 Chevrolet Camaro. He once wrestled a bear and was declared the winner by omoplata.

āĻāĻ‡ āĻ‡āĻŦā§āĻ•āĻ–āĻ¨āĻ• āĻŽā§‚āĻ˛ā§āĻ¯āĻžāĻ‚āĻ•āĻ¨ āĻ•ā§°āĻ•

āĻ†āĻŽāĻžāĻ• āĻ†āĻĒā§‹āĻ¨āĻžā§° āĻŽāĻ¤āĻžāĻŽāĻ¤ āĻœāĻ¨āĻžāĻ“āĻ•āĨ¤

āĻĒāĻĸāĻŧāĻžā§° āĻ¨āĻŋāĻ°ā§āĻĻā§‡āĻļāĻžā§ąāĻ˛ā§€

āĻ¸ā§āĻŽāĻžā§°ā§āĻŸāĻĢ’āĻ¨ āĻ†ā§°ā§ āĻŸā§‡āĻŦāĻ˛ā§‡āĻŸ
Android āĻ†ā§°ā§ iPad/iPhoneā§° āĻŦāĻžāĻŦā§‡ Google Play Books āĻāĻĒāĻŸā§‹ āĻ‡āĻ¨āĻˇā§āĻŸāĻ˛ āĻ•ā§°āĻ•āĨ¤ āĻ‡ āĻ¸ā§āĻŦāĻ¯āĻŧāĻ‚āĻ•ā§āĻ°āĻŋāĻ¯āĻŧāĻ­āĻžā§ąā§‡ āĻ†āĻĒā§‹āĻ¨āĻžā§° āĻāĻ•āĻžāĻ‰āĻŖā§āĻŸā§° āĻ¸ā§ˆāĻ¤ā§‡ āĻ›āĻŋāĻ‚āĻ• āĻšāĻ¯āĻŧ āĻ†ā§°ā§ āĻ†āĻĒā§āĻ¨āĻŋ āĻ¯'āĻ¤ā§‡ āĻ¨āĻžāĻĨāĻžāĻ•āĻ• āĻ¤'āĻ¤ā§‡āĻ‡ āĻ•ā§‹āĻ¨ā§‹ āĻ…āĻĄāĻŋāĻ…'āĻŦā§āĻ• āĻ…āĻ¨āĻ˛āĻžāĻ‡āĻ¨ āĻŦāĻž āĻ…āĻĢāĻ˛āĻžāĻ‡āĻ¨āĻ¤ āĻļā§āĻ¨āĻŋāĻŦāĻ˛ā§ˆ āĻ¸ā§āĻŦāĻŋāĻ§āĻž āĻĻāĻŋāĻ¯āĻŧā§‡āĨ¤
āĻ˛ā§‡āĻĒāĻŸāĻĒ āĻ†ā§°ā§ āĻ•āĻŽā§āĻĒāĻŋāĻ‰āĻŸāĻžā§°
āĻ†āĻĒā§āĻ¨āĻŋ āĻ•āĻŽā§āĻĒāĻŋāĻ‰āĻŸāĻžā§°ā§° ā§ąā§‡āĻŦ āĻŦā§āĻ°āĻžāĻ‰āĻœāĻžā§° āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āĻ•ā§°āĻŋ Google PlayāĻ¤ āĻ•āĻŋāĻ¨āĻž āĻ…āĻĄāĻŋāĻ…'āĻŦā§āĻ•āĻ¸āĻŽā§‚āĻš āĻļā§āĻ¨āĻŋāĻŦ āĻĒāĻžā§°ā§‡āĨ¤
āĻ‡-ā§°ā§€āĻĄāĻžā§° āĻ†ā§°ā§ āĻ…āĻ¨ā§āĻ¯ āĻĄāĻŋāĻ­āĻžāĻ‡āĻš
Kobo eReadersā§° āĻĻā§°ā§‡ āĻ‡-āĻšāĻŋā§ŸāĻžāĻāĻšā§€ā§° āĻĄāĻŋāĻ­āĻžāĻ‡āĻšāĻ¸āĻŽā§‚āĻšāĻ¤ āĻĒā§āĻŋāĻŦāĻ˛ā§ˆ, āĻ†āĻĒā§āĻ¨āĻŋ āĻāĻŸāĻž āĻĢāĻžāĻ‡āĻ˛ āĻĄāĻžāĻ‰āĻ¨āĻ˛â€™āĻĄ āĻ•ā§°āĻŋ āĻ¸ā§‡āĻ‡āĻŸā§‹ āĻ†āĻĒā§‹āĻ¨āĻžā§° āĻĄāĻŋāĻ­āĻžāĻ‡āĻšāĻ˛ā§ˆ āĻ¸ā§āĻĨāĻžāĻ¨āĻžāĻ¨ā§āĻ¤ā§°āĻŖ āĻ•ā§°āĻŋāĻŦ āĻ˛āĻžāĻ—āĻŋāĻŦāĨ¤ āĻ¸āĻŽā§°ā§āĻĨāĻŋāĻ¤ āĻ‡-ā§°āĻŋāĻĄāĻžā§°āĻ˛ā§ˆ āĻĢāĻžāĻ‡āĻ˛āĻŸā§‹ āĻ•ā§‡āĻ¨ā§‡āĻ•ā§ˆ āĻ¸ā§āĻĨāĻžāĻ¨āĻžāĻ¨ā§āĻ¤ā§° āĻ•ā§°āĻŋāĻŦ āĻœāĻžāĻ¨āĻŋāĻŦāĻ˛ā§ˆ āĻ¸āĻšāĻžāĻ¯āĻŧ āĻ•ā§‡āĻ¨ā§āĻĻā§ā§°āĻ¤ āĻĨāĻ•āĻž āĻ¸āĻŦāĻŋāĻļā§‡āĻˇ āĻ¨āĻŋā§°ā§āĻĻā§‡āĻļāĻžā§ąāĻ˛ā§€ āĻšāĻžāĻ“āĻ•āĨ¤