Coding for Penetration Testers

Chapter 9

Exploitation scripting

Information in this chapter:

• Building Exploits with Python

• Creating Metasploit Exploits

• Exploiting PHP Scripts

• Cross-Site Scripting

Now that we have been introduced to Python and PHP in Chapters 2 and 5, let’s take a look at how to take our basic penetration testing skills to the next level. While many of the exploits we will use will already be built for us, sometimes we will want to go above and beyond the basics. Whether it is to include a new payload in an already-built exploit, or fix a broken exploit, we want to understand the process of building exploits with scripting languages in order to apply them effectively in a practical context.

This chapter begins with an introduction to exploit scripting ...