Hands-On Penetration Testing with Python - Softcover

Khan, Furqan

Softcover

ISBN 10: 178899082X ISBN 13: 9781788990820

Publisher: Packt Publishing, 2019

Synopsis

Implement defensive techniques in your ecosystem successfully with Python

Key Features

• Identify and expose vulnerabilities in your infrastructure with Python
• Learn custom exploit development
• Make robust and powerful cybersecurity tools with Python

Book Description

With the current technological and infrastructural shift, penetration testing is no longer a process-oriented activity. Modern-day penetration testing demands intensive automation and innovation, and Python is at the forefront. Given the huge number of tools written in Python and its popularity in the penetration testing space, this language has always been the first choice for penetration testers.

Hands-On Penetration Testing with Python starts by taking you through advanced Python programming constructs. Once you are familiar with the core concepts, you'll explore advanced uses of Python in the domain of penetration testing and optimization. You'll then move on to understanding how Python, data science, and the cybersecurity ecosystem communicate with one another. In the concluding chapters, you'll get up to speed with exploit development, reverse engineering, and cybersecurity use cases that can be automated with Python.

By the end of this book, you'll have the skills you need to leverage Python for pentesting and securing infrastructure, while also creating your own custom exploits.

What you will learn

• Get to grips with custom vulnerability scanner development
• Learn web application scanning automation and exploit development
• Discover everyday cybersecurity scenarios that can be automated with Python
• Explore enterprise or organization-specific use cases and threat-hunting automation
• Understand reverse engineering, fuzzing, buffer overflows , key-logger development, and exploit development for buffer overflows
• Study web scraping in Python and use it for processing web responses
• Explore security operations center (SOC) use cases

Who this book is for

If you are a security consultant, developer or a cyber security enthusiast who wants in-depth insights into how the pentesting ecosystem and Python combine to create offensive tools and exploits, and automate cyber security use-cases, this book is for you. Prior knowledge of Python is not required

Table of Contents

1. Introduction to Python
2. Building Python Scripts
3. Concept Handling
4. Advanced Python Modules
5. Vulnerability Scanner Python - Part 1
6. Vulnerability Scanner Python - Part 2
7. Machine Learning and Cyber Security
8. Automating Web Application Scanning - Part 1
9. Automated Web Application Scanning - Part 2
10. Building a Custom Crawler
11. Reverse-Engineering Linux Applications
12. Reverse Engineering Windows Applications
13. Exploit Development
14. Cyber Threat Intelligence
15. Other Wonders of Python
16. Assessments

About this title

About the Author

Furqan Khan is a cybersecurity and automation enthusiast who loves to innovate in the domain of cybersecurity with the objective of exploring new age technologies like AI, ML, analytics, and amalgamating the same with cybersecurity to attain high-quality products with maximum automation and throughput.

Complementing his academic excellence with a gold medal at both master's and bachelor's degree in Engineering and full academic scholarship, Furqan has had a very rewarding industrial experience right from inception. Furqan has worked as a Research Scientist at National Institute of technology Karnataka where he developed a tool for Ministry of IT and Telecommunications for detection of Injection vulnerabilities, state violation attacks and parameter pollution in web applications.

Carrying forward his cybersecurity research and automation experience Furqan next took a role as a Senior Security researcher at Paladion Networks where he developed a vulnerability scanner which goes by the name Penetration Testing Orchestrator, a free version of which can be found on Git-hub. The tool explored the power of AI and Machine learning to automate the entire penetration testing process, thereby reducing the organizational cost by a significant factor.

Currently, Furqan is working with Wipro Dubai and has developed a Cyber Threat Intelligence platform, that automates the cyber intelligence process. The tool is highly customizable with tons of add-on features like phishing detection, social media intelligence etc. As a part of a roadmap, Furqan is actively working on more features and enhancement of the platform.

Furqan has published and co-authored high-class cyber security white papers & Journals with leading publications like Springer & Elsevier. Furqan has also presented his tool (PTO) at international conferences like CoCon as a keynote speaker and has many acclaims to his name on innovating with a blend of Python, ML, AI, Cybersecurity and Penetration Testing.

Edition details

• Publisher: Packt Publishing
• Publication date: 2019
• ISBN 10: 178899082X
• ISBN 13: 9781788990820
• Binding: Paperback
• Language: English
• Number of pages: 502