Hands-On Bug Hunting for Penetration Testers

nmap and python-nmap

Most of this book has revolved around testing web applications within the context of their browser-based attack surface—form fields, unsecured endpoints, and things you can generally view within a browser or browser extension.

But if you're looking to do more network analysis—checking for open ports, probing firewalls, and looking for connections beyond the standard HTTP/ TCP—nmap is a popular weapon of choice and an industry standard.

python-nmap is exactly what it sounds—a Python-based port of the software. This can be extremely useful if you'd like to hack on nmap. Whether you're adding checks to the existing port discovery of nmap or grafting on layers of custom alert logic, the python-nmap package is a great starting ...