Learning Python Web Penetration Testing
Webpenetrationtestingistheuseoftoolsandcodetoattackawebsiteorwebappinordertoassessitsvulnerabilitytoexternalthreats.Whilethereareanincreasingnumberofsophisticated,ready-madetoolstoscansystemsforvulnerabilities,theuseofPythonallowsyoutowritesystem-specificscripts,oralterandextendexistingtestingtoolstofind,exploit,andrecordasmanysecurityweaknessesaspossible.LearningPythonWebPenetrationTestingwillwalkyouthroughthewebapplicationpenetrationtestingmethodology,showingyouhowtowriteyourowntoolswithPythonforeachactivitythroughouttheprocess.ThebookbeginsbyemphasizingtheimportanceofknowinghowtowriteyourowntoolswithPythonforwebapplicationpenetrationtesting.YouwillthenlearntointeractwithawebapplicationusingPython,understandtheanatomyofanHTTPrequest,URL,headersandmessagebody,andlatercreateascripttoperformarequest,andinterprettheresponseanditsheaders.Asyoumakeyourwaythroughthebook,youwillwriteawebcrawlerusingPythonandtheScrappylibrary.Thebookwillalsohelpyoutodevelopatooltoperformbruteforceattacksindifferentpartsofthewebapplication.YouwillthendiscovermoreondetectingandexploitingSQLinjectionvulnerabilities.Bytheendofthisbook,youwillhavesuccessfullycreatedanHTTPproxybasedonthemitmproxytool.
·2.3萬字
