Aprenda sobre hacking., Manuais, Projetos, Pesquisas de Aplicações de Ciências da Computação

Baixe Aprenda sobre hacking. e outras Manuais, Projetos, Pesquisas em PDF para Aplicações de Ciências da Computação, somente na Docsity!

J O S E M A N U E L O RT E GA

@J M O RT E GA C

Ethical hacking with

Python tools

https://speakerdeck.com/jmortega

Python Pentesting  Multi platform  Prototypes and proofs of concept(POC)  Many tools and libraries focused on security  OSINT and Pentesting tools  Very good documentation

Python Pentesting

The Harvester

The Harvester

Tools  Scapy

 Capturing and analysing network packets

 FiMap

 Detecting RFI/LFI vulnerabilites

 XSScrapy

 Detecting XSS vulnerabilites

Sockets Port scan import socket #TCP sock = socket(socket.AF_INET, socket.SOCK_STREAM )

result = sock.connect_ex(('127.0.0.1',80))

if result == 0:

print "Port is open"

else:

print "Port is filtered"

Socket resolving IP/domain

Banner server

Requests

Checking headers

Requests import requests http_proxy = "http://10.10.10.10:3000" https_proxy = "https://10.10.10.10:3000" proxyDict = { "http" : http_proxy, "https" : https_proxy }

r = requests.get(url, proxies=proxyDict )

Requests Authentication