Python Penetration Testing Cookbook
Practical recipes on implementing information gathering, network security, intrusion detection, and post-exploitation
Rejah Rehim
BIRMINGHAM - MUMBAI
Python Penetration Testing Cookbook
Copyright 2017 Packt Publishing
All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.
Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the author, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.
Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.
First published: November 2017
Production reference: 1271117
Published by Packt Publishing Ltd.
Livery Place
35 Livery Street
Birmingham
B3 2PB, UK.
ISBN 978-1-78439-977-1
www.packtpub.com
Credits
Author Rejah Rehim | Copy Editor Safis Editing |
Reviewers Dr. S. Gowrishankar Sanjeev Jaiswal | Project Coordinator Judie Jose |
Commissioning Editor Gebin George | Proofreader Safis Editing |
Acquisition Editor Shrilekha Inani | Indexer Rekha Nair |
Content Development Editor Devika Battike | Graphics Tania Dutta |
Technical Editor Aditya Khadye | Production Coordinator Arvindkumar Gupta |
About the Author
Rejah Rehim is currently the Director and Chief Information Officer (CIO) of Appfabs. Previously holding the title of Security Architect at FAYA India, he is a long-time preacher of open source.
He is a steady contributor to the Mozilla Foundation and his name has been added to the San Francisco Firefox Monument. A member of the Mozilla add-ons review board, he has contributed to the development of several node modules. He is credited with the creation of nine Mozilla add-ons, including the very popular Clear Console add-on, which was selected as one of the best Mozilla add-ons of 2013. With a user base of more than 44,000, it has seen more than 800,000 downloads to date. He has successfully created the world's first security testing browser bundle, PenQ, an open source Linux-based penetration testing browser bundle preconfigured with tools for spidering, advanced web searching, fingerprinting, and so on.
Rejah is also an active member of OWASP and the chapter leader of OWASP Kerala. He is also an active speaker at FAYA:80, a tech community based in Kerala, with the mission of free knowledge sharing. Besides being a part of the cyber security division of FAYA, Rejah is also a student of process automation and has implemented it in FAYA.
Additionally, Rejah also holds the title of commander at Cyberdome, an initiative of the Kerala Police Department.
I take this opportunity to express my deep gratitude to my parents, Abdul Majeed and Safiya; my wife, Ameena Rahamath; and my daughter, Nyla, for their unwavering support and prayers in every phase of my life and growth.
I would be remiss if I do not thank my friends for their constant help in both the personal and professional spheres. I am truly blessed to have worked with some of the smartest and most dedicated people at Appfabs. This humble endeavor would not have reached fruition without the motivation from my dear colleagues, especially Mariya John. Also imperative to this journey were Devika Battike and Shrileka Inani, my editors at Packtthank you for pushing my limits.
And finally, to God Almighty, for making all of the above possible.
About the Reviewers
Dr. S. Gowrishankar is currently working as an associate professor in the department of computer science and engineering at Dr. Ambedkar Institute of Technology, Bengaluru, Karnataka, India.
He received his PhD in engineering from Jadavpur University, Kolkata, West-Bengal, India in 2010 and an M.Tech in software engineering and a B.E in computer science and engineering from Visvesvaraya Technological University (VTU), Belagavi, Karnataka, India in the years 2005 and 2003, respectively.
From 2011 to 2014, he worked as senior research scientist and tech lead at Honeywell Technology Solutions, Bengaluru, Karnataka, India.
He has published several papers in various reputable international journals and has spoken at conferences. He is serving as editor and reviewer for various prestigious international journals. He is also member of IEEE, ACM, CSI, and ISTE.
He has delivered many keynote addresses and has been invited to talk throughout India on a variety of subjects related to computer science and engineering. He has been instrumental in organizing several conferences, workshops, and seminars. He has also served on the panel of a number of academic bodies of universities and autonomous colleges as a BOS and BOE member.
His current research interests are mainly focused on data science, including its technical aspects, as well as its applications and implications. Specifically, he is interested in the application of machine learning, data mining, and big data analytics in healthcare.
I would like to acknowledge my earnest gratitude to my sister, Ashwini.S.Nath, for her support and encouragement throughout this project.
Sanjeev Jaiswal is a computer science graduate from CUSAT and has 8 years of extensive experience in web development and application security. He enjoys writing applications using Perl and Python in Linux environment. He is the founder of a technical blogging websiteAlienCoders.
Currently, he is involved in product security and cloud security (AWS) related projects. He is also learning network security at present. He has authored two books with Packt and has reviewed more than eight books from Packt regarding Python, penetration testing, and security projects.
My special thanks go to my wife Shalini Jaiswal and close friends Ritesh Kamal, Shankar Anand, Santosh Vishwakarma, Vivek Tailor, and Ranjan Pandey for personal and professional support all the time.
I am also grateful to Packt and its team members for giving me the opportunity to author and review books. I always enjoy reading, writing, and reviewing Python and security related books.
www.PacktPub.com
For support files and downloads related to your book, please visit www.PacktPub.com .
Did you know that Packt offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at www.PacktPub.com and as a print book customer, you are entitled to a discount on the eBook copy. Get in touch with us at service@packtpub.com for more details.