Web Application Pen Testing with Python
When using tooling and scripting efficiently, one can improve the results of web application pentests. This course will teach you how to automate several web application steps using Python.
What you'll learn
Most web application pentests follow a similar pattern, using the same tools each time. In this course, Web Application Pen Testing with Python, you’ll learn to utilize Python in order to become a better pentester. First, you’ll explore how to choose the right library and the right tool for the job. Next, you’ll discover how to glue web application pentesting tools together. Finally, you’ll learn how to develop an extension for the famous Burp Suite intercepting proxy. When you’re finished with this course, you’ll have the skills and knowledge of automation and Python needed to enhance your web application pentesting coverage and increase your pentesting skills.
Table of contents
- Course Introduction 5m
- Demo: Setting up a Python Development Environment 4m
- Getting Started with Python for Web Application Penetration Tests 6m
- Demo: Automate WHOIS Lookups Using Python 1 6m
- Demo: Automate WHOIS Lookups Using Python 2 4m
- Requirements for a Python Port Scanning Script 1m
- Demo: Perform a Port Scan Using Python 5m
- Module Summary 1m
- Module Introduction 1m
- Demo: Look at HTML Form Authentication 4m
- Requirements for a Brute-force HTML Form Script 1m
- Demo: Create a Brute-force Script for HTML Form Authentication 1 7m
- Demo: Create a Brute-force Script for HTML Form Authentication 2 3m
- Tips and Tricks for Testing Web Applications Using Python 1m
- Module Summary 1m
About the author
Peter started out in the nineties as software engineer working on internet banking applications for various European financial institutions. After developing, he moved to the role of defending and designing systems and networks for high-availability websites. Since 2004 he started specializing in breaking: pentesting complex and feature-rich web applications. Currently he leads a global team of highly skilled penetration testers as lead pentester. He is a contributor to several open-source penet... more