Mastering Web Penetration Testing with Python

by Gerasimos Kassaras

Over 100 tips and tricks to help you perform generic and custom web application penetration testing using Python This book will help web application developers, professional penetration testers, and web application security analysts to standardise their web application security assessments. Python is a multi-paradigm programming language well suited to both object-oriented application development as well as functional design patterns. This practical tutorial provides a comprehensive walk-through of Python web testing approaches. You'll work through examples on the most popular penetration tools and methods available in Python. We start off by describing the current landscape as far as web application security is concerned. We then look into examples from previous published hacks as a refresher. We quickly move on to discuss the methodology of a penetration test and how it can be formalized. Next we take a look at phishing and its methodologies. Finally, we explore SQL injection attacks and use Python scripts to perform these attacks. We'll show you how to identify gaps/weaknesses and perform post-exploitation of the identified vulnerabilities in web apps using Python. We'll also help you master the major skill of running penetration tests or exploitation attacks. By the end of the book, you will have mastered the skill of web penetration testing using your own scripts

442 pages, Paperback

Published June 6, 2016