book

Python for Security and Networking - Third Edition

Name: Python for Security and Networking - Third Edition
Author: José Manuel Ortega
ISBN: 9781837637553

by José Manuel Ortega

June 2023

Intermediate to advanced

586 pages

12h 35m

English

Packt Publishing

Read now

Unlock full access

Preface
Who this book is forWhat this book coversTo get the most out of this bookGet in touch
Section 1: Python Environment and System Programming Tools
Working with Python Scripting
Technical requirementsLearn about data structures and collections in PythonPython listsAdding elements to a listReversing a listSearching elements in a listPython tuplesPython dictionariesRemove an item from a dictionary in PythonWorking with functions, classes, and objects in PythonPython functionsPython classesPython inheritanceAdvantages of Python inheritanceWorking with files in PythonReading and writing files in PythonLearn and understand exceptions management in PythonPython modules and packagesWhat is a module in Python?How to import modules in PythonGetting information from modulesDifference between a Python module and a Python packageManaging parameters in PythonManaging parameters with OptionParserManaging dependencies and virtual environmentsManaging dependencies in a Python projectInstall Python modulesGenerating the requirements.txt fileWorking with virtual environmentsConfiguring virtualenvDevelopment environments for Python scriptingSetting up a development environmentDebugging with Python IDLEPyCharmDebugging with PyCharmSummaryQuestionsFurther reading
System Programming Packages
Technical requirementsInteract with the operating system in PythonWorking with the filesystem in PythonWorking with files and directoriesReading a ZIP file using PythonExecuting commands with the subprocess moduleSetting up a virtualenv with subprocessManaging threads in PythonCreating a simple threadWorking with the threading moduleMultiprocessing in PythonMultithreading and concurrency in PythonMultithreading in PythonConcurrency in Python with ThreadPoolExecutorExecuting ThreadPoolExecutor with a context managerSummaryQuestionsFurther reading
Section 2: Network Scripting and Packet Sniffing with Python
Socket Programming
Technical requirementsUnderstanding the socket package for network requestsNetwork sockets in PythonThe socket moduleServer and client socket methodsGathering information with socketsManaging socket exceptionsBasic client with the socket modulePort scanning with socketsImplementing a port scannerAdvanced port scannerImplementing a reverse shell with socketsImplementing a simple TCP client and TCP serverImplementing a server and client with socketsImplementing the TCP serverImplementing the TCP clientImplementing a simple UDP client and UDP serverImplementing the UDP serverImplementing the UDP clientImplementing an HTTP server in PythonTesting the HTTP serverSending files via socketsImplementing secure sockets with the TLS and SSL modulesSummaryQuestionsFurther reading
HTTP Programming and Web Authentication
Technical requirementsBuilding an HTTP client with urllib.requestIntroducing the HTTP protocolIntroducing the urllib moduleGet request and response headersExtracting emails from a URL with urllib.requestDownloading files with urllib.requestHandling exceptions with urllib.requestBuilding an HTTP client with requestsGetting images and links from a URL with requestsMaking requests with the REST APIManaging a proxy with requestsManaging exceptions with requestsAuthentication mechanisms with PythonHTTP basic authentication with the requests moduleHTTP digest authentication with the requests moduleImplementing OAuth clients in Python with the requests-oauthlib moduleOAuth rolesOAuth workflowImplementing a client with requests_oauthlibImplementing JSON Web Tokens (JWTs) in PythonHow does a JSON Web Token work?Working with PyJWTSummaryQuestionsFurther reading
Analyzing Network Traffic and Packet Sniffing
Technical requirementsCapturing and injecting packets with pcapy-ngCapturing packets with pcapy-ngReading headers from packetsReading pcap files with pcapy-ngCapturing and injecting packets with scapyIntroduction to scapyScapy commandsSending packets with scapyNetwork discovery with scapyPort scanning and traceroute with scapyPort scanning with scapyTraceroute with scapyReading pcap files with scapyRead DHCP requestsWriting a pcap filePacket-sniffing with scapyNetwork forensics with scapyWorking with scapy to detect ARP spoofing attacksDetection of false ARP attacks using ScapySummaryQuestionsFurther reading
Section 3: Server Scripting and Port Scanning with Python
Gathering Information from Servers with OSINT Tools
Technical requirementsIntroducing Open Source Intelligence (OSINT)Google Dorks and the Google Hacking DatabaseMaltegoPhotonThe HarvesterCensyscrt.shDnsDumpsterWaybackMachineOSINT frameworkBlackbirdThe Shodan search engineThe BinaryEdge search engineGetting information using Google DorksGoogle DorksKatana: a Python Tool for Google HackingDorks hunterGetting information using SpiderFootSpiderFoot modulesGetting information on DNS servers with DNSPython and DNSReconThe DNS protocolThe DNSPython moduleDNSReconGetting vulnerable addresses in servers with fuzzingThe fuzzing processWeb fuzzingUnderstanding and using the FuzzDB projectIdentifying predictable login pages with the FuzzDB projectDiscovering SQL injection with the FuzzDB projectWfuzzSummaryQuestionsFurther reading

Interacting with FTP, SFTP, and SSH Servers
Technical requirementsConnecting to FTP serversFTP protocolUsing the Python ftplib moduleTransferring files with FTPOther ftplib functionsUsing ftplib to brute-force FTP user credentialsBuilding an anonymous FTP scanner with PythonConnecting with SSH servers with paramiko and pysftpExecuting an SSH server on Debian LinuxIntroducing the paramiko moduleEstablishing an SSH connection with paramikoUsing AutoAddPolicyRunning commands with paramikoUsing paramiko to brute-force SSH user credentialsEstablishing an SSH connection with pysftpImplementing an SSH server with paramikoChecking the security of SSH serversInstalling and executing ssh-auditRebex SSH CheckSummaryQuestionsFurther reading
Working with Nmap Scanner
Technical requirementsIntroducing port scanning with NmapScanning types with nmapPort scanning with python-nmapExtracting information with nmapSynchronous and asynchronous scanning with python-nmapImplementing synchronous scanningImplementing asynchronous scanningDiscovering services and vulnerabilities with Nmap scriptsExecuting Nmap scripts to discover servicesExecuting Nmap scripts to discover vulnerabilitiesDetecting vulnerabilities with Nmap-vulners scriptDetecting vulnerabilities with the Nmap-vulscan scriptPort scanning via online servicesScanless port scannerSummaryQuestionsFurther reading
Section 4: Server Vulnerabilities and Security in Web Applications
Interacting with Vulnerability Scanners
Technical requirementsIntroducing the OpenVAS vulnerability scannerInstalling the OpenVAS vulnerability scannerUnderstanding the web interfaceScanning a target using OpenVASCreating the targetCreating the taskAnalyzing reportsVulnerabilities databasesAccessing OpenVAS with PythonIntroducing OWASP ZAP as an automated security testing toolUsing OWASP ZAPInteracting with OWASP ZAP using PythonWriteHat as a pentesting reports toolSummaryQuestionsFurther reading
Interacting with Server Vulnerabilities in Web Applications
Technical requirementsUnderstanding vulnerabilities in web applications with OWASPTesting Cross-Site Scripting (XSS) vulnerabilitiesAnalyzing and discovering vulnerabilities in CMS web applicationsUsing CMSmapVulnx as a CMS scannerDiscovering vulnerabilities in Tomcat server applicationsInstalling the Tomcat serverTesting the Tomcat server with ApacheTomcatScannerFinding vulnerable Tomcat servers in the Censys search engineScanning vulnerabilities with the Nmap port scannerDiscovering SQL vulnerabilities with Python toolsIntroduction to SQL injectionIdentifying websites vulnerable to SQL injectionIntroducing sqlmapUsing sqlmap to test a website for a SQL injection vulnerabilityScanning for SQL injection vulnerabilities with sqlifinderScanning for SQL injection vulnerabilities with the Nmap port scannerAutomating the process of detecting vulnerabilities in web applicationsDetecting an open redirect vulnerabilityDetecting vulnerabilities with FuxploiderSummaryQuestionsFurther reading
Obtain Information from Vulnerabilities Databases
Technical requirementsIdentify and understand vulnerabilities and exploitsWhat is an exploit?Vulnerability formatsSearching for vulnerabilities in the NVDIntroducing NIST’s NVDSearching for vulnerabilitiesSearching for vulnerabilities in the Vulners databaseSearching for vulnerabilities with PompemSummaryQuestionsFurther reading
Section 5: Python Forensics
Extracting Geolocation and Metadata from Documents, Images, and Browsers
Technical requirementsExtracting geolocation informationPython modules for extracting geolocation informationExtracting metadata from imagesIntroduction to EXIF and the PIL moduleGetting the EXIF data from an imageExtracting metadata from PDF documentsExtracting metadata with PyPDF2Extracting metadata with PyMuPDFIdentifying the technology used by a websiteWappalyzerWebApp Information Gatherer (WIG)Extracting metadata from web browsersFirefox forensics with PythonChrome forensics with PythonChrome forensics with HindsightSummaryQuestionsFurther reading
Python Tools for Brute-Force Attacks
Technical requirementsDictionary builders for brute-force attacksBrute-force dictionary generation with pydictorPassword list generatorTools for brute-force attacks in PythonObtaining subdomains by brute forceBrute-force attacks with BruteSprayBrute-force attacks with CerbrutusExecuting brute-force attacks for web applicationsExecuting a WordPress siteExecuting brute-force attacks for ZIP filesHandling ZIP files in PythonExecuting brute-force attacks for password-protected ZIP filesSummaryQuestionsFurther reading
Cryptography and Code Obfuscation
Technical requirementsIntroduction to cryptographyEncrypting and decrypting information with pycryptodomeIntroduction to pycryptodomeEncrypting and decrypting with the DES algorithmEncrypting and decrypting with the AES algorithmGenerating RSA signatures using pycryptodomeEncrypting and decrypting information with cryptographyIntroduction to the cryptography moduleSymmetric encryption with the fernet packageSymmetric encryption with the ciphers packageGenerating keys securely with the secrets and hashlib modulesGenerating keys securely with the secrets moduleGenerating keys securely with the hashlib moduleChecking the integrity of a filePython tools for code obfuscationCode obfuscation with pyarmorSummaryQuestionsFurther reading
Assessments – Answers to the End-of-Chapter Questions
Other Books You May Enjoy
Index

Overview

Python for Security and Networking offers a comprehensive guide to leveraging Python tools and libraries for securing networks and applications. With step-by-step explanations and expert insights, this book teaches you to utilize Python's latest features to automate tasks and build robust security systems.

What this Book will help me do

Create Python-based tools for network security processes.
Automate server information extraction and analyses.
Identify and address server vulnerabilities in web applications.
Streamline penetration testing methodologies using Python scripts.
Utilize advanced tools such as ssh-audit and Fuxploider effectively.

Author(s)

José Manuel Ortega is an experienced Python developer and cybersecurity professional. He has extensive experience in network security, Python scripting, and teaching technical skills. José's approach to writing and teaching is practical and example-driven, ensuring readers gain hands-on expertise.

Who is it for?

This book is ideal for network engineers and system administrators aiming to enhance network security using Python. Intermediate programmers looking to expand their Python knowledge into security applications will also find it beneficial. A working knowledge of programming concepts and basic Python is recommended to follow along effectively.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Mastering Python for Networking and Security - Second Edition

Publisher Resources

ISBN: 9781837637553

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills