Python Web Penetration Testing Cookbook

¡ Packt Publishing Ltd
ā§Ē.ā§Ļ
⧍ āϟāĻž āĻĒā§°ā§āϝāĻžāϞ⧋āϚāύāĻž
āχāĻŦ⧁āĻ•
224
āĻĒ⧃āĻˇā§āĻ āĻž
āĻŽā§‚āĻ˛ā§āϝāĻžāĻ‚āĻ•āύ āφ⧰⧁ āĻĒā§°ā§āϝāĻžāϞ⧋āϚāύāĻž āϏāĻ¤ā§āϝāĻžāĻĒāύ āϕ⧰āĻž āĻšā§‹ā§ąāĻž āύāĻžāχ  āĻ…āϧāĻŋāĻ• āϜāĻžāύāĻ•

āĻāχ āχāĻŦ⧁āĻ•āĻ–āύ⧰ āĻŦāĻŋāĻˇā§Ÿā§‡

This book gives you an arsenal of Python scripts perfect to use or to customize your needs for each stage of the testing process. Each chapter takes you step by step through the methods of designing and modifying scripts to attack web apps. You will learn how to collect both open and hidden information from websites to further your attacks, identify vulnerabilities, perform SQL Injections, exploit cookies, and enumerate poorly configured systems. You will also discover how to crack encryption, create payloads to mimic malware, and create tools to output your findings into presentable formats for reporting to your employers.

āĻŽā§‚āĻ˛ā§āϝāĻžāĻ‚āĻ•āύ āφ⧰⧁ āĻĒā§°ā§āϝāĻžāϞ⧋āϚāύāĻžāϏāĻŽā§‚āĻš

ā§Ē.ā§Ļ
⧍ āϟāĻž āĻĒā§°ā§āϝāĻžāϞ⧋āϚāύāĻž

āϞāĻŋāĻ–āϕ⧰ āĻŦāĻŋāώāϝāĻŧ⧇

Cameron Buchanan is a penetration tester by trade and a writer in his spare time. He has performed penetration tests around the world for a variety of clients across many industries. Previously, he was a member of the RAF. In his spare time, he enjoys doing stupid things, such as trying to make things fly, getting electrocuted, and dunking himself in freezing cold water. He is married and lives in London.

Terry Ip is a security consultant. After nearly a decade of learning how to support IT infrastructure, he decided that it would be much more fun learning how to break it instead. He is married and lives in Buckinghamshire, where he tends to his chickens.

Andrew Mabbitt is a penetration tester living in London, UK. He spends his time beating down networks, mentoring, and helping newbies break into the industry. In his free time, he loves to travel, break things, and master the art of sarcasm.

Benjamin May is a security test engineer from Cambridge. He studied computing for business at Aston University. With a background in software testing, he recently combined this with his passion for security to create a new role in his current company. He has a broad interest in security across all aspects of the technology field, from reverse engineering embedded devices to hacking with Python and participating in CTFs. He is a husband and a father.

Dave Mound is a security consultant. He is a Microsoft Certified Application Developer but spends more time developing Python programs these days. He has been studying information security since 1994 and holds the following qualifications: C|EH, SSCP, and MCAD. He recently studied for OSCP certification but is still to appear for the exam. He enjoys talking and presenting and is keen to pass on his skills to other members of the cyber security community. When not attached to a keyboard, he can be found tinkering with his 1978 Chevrolet Camaro. He once wrestled a bear and was declared the winner by omoplata.

āĻāχ āχāĻŦ⧁āĻ•āĻ–āύāĻ• āĻŽā§‚āĻ˛ā§āϝāĻžāĻ‚āĻ•āύ āϕ⧰āĻ•

āφāĻŽāĻžāĻ• āφāĻĒā§‹āύāĻžā§° āĻŽāϤāĻžāĻŽāϤ āϜāύāĻžāĻ“āĻ•āĨ¤

āĻĒāĻĸāĻŧāĻžā§° āύāĻŋāĻ°ā§āĻĻ⧇āĻļāĻžā§ąāϞ⧀

āĻ¸ā§āĻŽāĻžā§°ā§āϟāĻĢ’āύ āφ⧰⧁ āĻŸā§‡āĻŦāϞ⧇āϟ
Android āφ⧰⧁ iPad/iPhoneā§° āĻŦāĻžāĻŦ⧇ Google Play Books āĻāĻĒāĻŸā§‹ āχāύāĻˇā§āϟāϞ āϕ⧰āĻ•āĨ¤ āχ āĻ¸ā§āĻŦāϝāĻŧāĻ‚āĻ•ā§āϰāĻŋāϝāĻŧāĻ­āĻžā§ąā§‡ āφāĻĒā§‹āύāĻžā§° āĻāĻ•āĻžāωāĻŖā§āϟ⧰ āϏ⧈āϤ⧇ āĻ›āĻŋāĻ‚āĻ• āĻšāϝāĻŧ āφ⧰⧁ āφāĻĒ⧁āύāĻŋ āϝ'āϤ⧇ āύāĻžāĻĨāĻžāĻ•āĻ• āϤ'āϤ⧇āχ āϕ⧋āύ⧋ āĻ…āĻĄāĻŋāĻ…'āĻŦ⧁āĻ• āĻ…āύāϞāĻžāχāύ āĻŦāĻž āĻ…āĻĢāϞāĻžāχāύāϤ āĻļ⧁āύāĻŋāĻŦāϞ⧈ āϏ⧁āĻŦāĻŋāϧāĻž āĻĻāĻŋāϝāĻŧ⧇āĨ¤
āϞ⧇āĻĒāϟāĻĒ āφ⧰⧁ āĻ•āĻŽā§āĻĒāĻŋāωāϟāĻžā§°
āφāĻĒ⧁āύāĻŋ āĻ•āĻŽā§āĻĒāĻŋāωāϟāĻžā§°ā§° ā§ąā§‡āĻŦ āĻŦā§āϰāĻžāωāϜāĻžā§° āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻŋ Google PlayāϤ āĻ•āĻŋāύāĻž āĻ…āĻĄāĻŋāĻ…'āĻŦ⧁āĻ•āϏāĻŽā§‚āĻš āĻļ⧁āύāĻŋāĻŦ āĻĒāĻžā§°ā§‡āĨ¤
āχ-ā§°ā§€āĻĄāĻžā§° āφ⧰⧁ āĻ…āĻ¨ā§āϝ āĻĄāĻŋāĻ­āĻžāχāϚ
Kobo eReadersā§° āĻĻ⧰⧇ āχ-āϚāĻŋ⧟āĻžāρāĻšā§€ā§° āĻĄāĻŋāĻ­āĻžāχāϚāϏāĻŽā§‚āĻšāϤ āĻĒā§āĻŋāĻŦāϞ⧈, āφāĻĒ⧁āύāĻŋ āĻāϟāĻž āĻĢāĻžāχāϞ āĻĄāĻžāωāύāĻ˛â€™āĻĄ āϕ⧰āĻŋ āϏ⧇āχāĻŸā§‹ āφāĻĒā§‹āύāĻžā§° āĻĄāĻŋāĻ­āĻžāχāϚāϞ⧈ āĻ¸ā§āĻĨāĻžāύāĻžāĻ¨ā§āϤ⧰āĻŖ āϕ⧰āĻŋāĻŦ āϞāĻžāĻ—āĻŋāĻŦāĨ¤ āϏāĻŽā§°ā§āĻĨāĻŋāϤ āχ-ā§°āĻŋāĻĄāĻžā§°āϞ⧈ āĻĢāĻžāχāϞāĻŸā§‹ āϕ⧇āύ⧇āĻ•ā§ˆ āĻ¸ā§āĻĨāĻžāύāĻžāĻ¨ā§āϤ⧰ āϕ⧰āĻŋāĻŦ āϜāĻžāύāĻŋāĻŦāϞ⧈ āϏāĻšāĻžāϝāĻŧ āϕ⧇āĻ¨ā§āĻĻā§ā§°āϤ āĻĨāĻ•āĻž āϏāĻŦāĻŋāĻļ⧇āώ āύāĻŋā§°ā§āĻĻ⧇āĻļāĻžā§ąāϞ⧀ āϚāĻžāĻ“āĻ•āĨ¤