Hands-On Penetration Testing with Python

Khan, Furqan

ISBN 10: 178899082X / ISBN 13: 9781788990820

Published by Packt Publishing, 2019

About this Item

This book is a blend of penetration testing and best practices industrial automation in cybersecurity space with Python. This book will enable pentesters to take their skills to the next level by leveraging the power of Python and explaining the core concep.

Seller Inventory # 448329734

Bibliographic Details

• Title: Hands-On Penetration Testing with Python
• Publisher: Packt Publishing
• Publication Date: 2019
• Language: English
• ISBN 10: 178899082X
• ISBN 13: 9781788990820
• Binding: Soft cover
• Condition: New

About this title

Synopsis

Implement defensive techniques in your ecosystem successfully with Python

Key Features

• Identify and expose vulnerabilities in your infrastructure with Python
• Learn custom exploit development .
• Make robust and powerful cybersecurity tools with Python

Book Description

With the current technological and infrastructural shift, penetration testing is no longer a process-oriented activity. Modern-day penetration testing demands lots of automation and innovation; the only language that dominates all its peers is Python. Given the huge number of tools written in Python, and its popularity in the penetration testing space, this language has always been the first choice for penetration testers.

Hands-On Penetration Testing with Python walks you through advanced Python programming constructs. Once you are familiar with the core concepts, you'll explore the advanced uses of Python in the domain of penetration testing and optimization. You'll then move on to understanding how Python, data science, and the cybersecurity ecosystem communicate with one another. In the concluding chapters, you'll study exploit development, reverse engineering, and cybersecurity use cases that can be automated with Python.

By the end of this book, you'll have acquired adequate skills to leverage Python as a helpful tool to pentest and secure infrastructure, while also creating your own custom exploits.

What you will learn

• Get to grips with Custom vulnerability scanner development
• Familiarize yourself with web application scanning automation and exploit development
• Walk through day-to-day cybersecurity scenarios that can be automated with Python
• Discover enterprise-or organization-specific use cases and threat-hunting automation
• Understand reverse engineering, fuzzing, buffer overflows , key-logger development, and exploit development for buffer overflows.
• Understand web scraping in Python and use it for processing web responses
• Explore Security Operations Centre (SOC) use cases
• Get to understand Data Science, Python, and cybersecurity all under one hood

Who this book is for

If you are a security consultant , developer or a cyber security enthusiast with little or no knowledge of Python and want in-depth insight into how the pen-testing ecosystem and python combine to create offensive tools , exploits , automate cyber security use-cases and much more then this book is for you. Hands-On Penetration Testing with Python guides you through the advanced uses of Python for cybersecurity and pen-testing, helping you to better understand security loopholes within your infrastructure .

Table of Contents

1. Introduction to Python
2. Building Python Scripts
3. Concept Handling
4. Advanced Python Modules
5. Vulnerability Scanner Python - Part 1
6. Vulnerability Scanner Python - Part 2
7. Machine Learning and Cyber Security
8. Automating Web Application Scanning - Part 1
9. Automated Web Application Scanning - Part 2
10. Building a Custom Crawler
11. Reverse-Engineering Linux Applications
12. Reverse Engineering Windows Applications
13. Exploit Development
14. Cyber Threat Intelligence
15. Other Wonders of Python
16. Assessments

About the Author

Furqan Khan is a security researcher who loves to innovate in Python, pentesting, ML, AI, and big data ecosystems. With a gold medal at both M.Tech and B.Tech, he started off as a research scientist at NITK, where he developed a web app scanner for the Ministry of IT (India). He then worked as a security researcher with Paladion Networks and Wipro Dubai exploring pentesting/exploitation space where he developed tools such as vulnerability scanner and a threat intelligence platform. Currently, he is working with Du-Telecom Dubai as a pentesting manager. He has published and co-authored white papers and journals with Springer and Elsevier, and has also presented his research and development work at international conferences, including CoCon.