Python for Automating Information Security

Python for Automating Information Security

by Thomas McNeela
Released May 2020
Publisher(s): Packt Publishing
ISBN: 9781838828219

Read it now on the O’Reilly learning platform with a 10-day free trial.

O’Reilly members get unlimited access to live online training experiences, plus books, videos, and digital content from O’Reilly and nearly 200 trusted publishing partners.

Start your free trial

Video description

Learn how to use the Python programming language to automate offensive and defensive information security tasks

About This Video

  • Learn individual information security techniques using Python
  • Use several powerful pre-built Python libraries for your own purposes
  • Build real information security tools in Python!

In Detail

The process of finding and eradicating an attacker is time-consuming and costs a lot, which hurts your organization. You need to write tools that will help you automate your defensive and offensive security. As a penetration tester, you need to evolve quickly. When off-the-shelf tools and exploits fall short, writing your own tool will help you safeguard your data.

In this course, learn how to leverage Python to perform routine tasks quickly and efficiently. You will automate log analysis and packet analysis with file operations, regular expressions, and analysis modules; interact with websites to collect intelligence; and develop TCP client and server applications for use in penetration testing. You will learn how to build automation tools for information security, and will hopefully find that these examples will help inspire you to design and build your own!

By the end of this course, you will have the skills and confidence you need to automate both offensive and defensive security techniques using Python; and have developed several small security tools and one large comprehensive penetration testing tool, all of which can be used in the real world.

Audience

If you are a security professional, a networking enthusiast, or just plain curious in understanding how networks and packets work internally, then this course is for you!

Requirements: Beginner to intermediate-level Python proficiency recommended, Oracle VirtualBox, Kali Linux, Metasploitable 2 and PyCharm IDE in your Kali system.

Publisher resources

Download Example Code

Table of contents

  1. Chapter 1 : Reading, Modifying, and Testing an Exploit Script
    1. The Course Overview
    2. Setting Up Your Virtual Environment
    3. Finding an Exploit Script
    4. Understanding the Script
    5. Modifying the Script
    6. Testing the Script
  2. Chapter 2 : Analyzing a Packet Capture File
    1. Viewing a Packet Capture File in Wireshark
    2. Understanding Normal Traffic Patterns
    3. Writing a Python Script to Look for Malicious Network Traffic
    4. Writing a Python Script to Calculate a Network Traffic Baseline
    5. Writing a Python Script to Compare a Baseline Against Network Traffic
  3. Chapter 3 : Gathering Open-Source Intelligence
    1. What OSINT Is
    2. Enumerating Domain Names with Python
    3. What Is Google Dorking
    4. Automating Google Dorking with Python
    5. Web Directory Enumeration with Python
  4. Chapter 4 : Analyzing a Log File
    1. Reading a Log File
    2. Understanding Normal Log Messages
    3. Writing a Python Script to Look for Logs Indicating Malicious Activity
    4. Writing a Python Script to Calculate a Log Message Baseline
    5. Writing a Python Script to Compare a Baseline Against a Log File
  5. Chapter 5 : Writing a Python Replacement for Netcat
    1. What Is Netcat?
    2. Writing the Input Arguments
    3. Writing the Client
    4. Writing the Server
    5. Testing Your Program
  6. Chapter 6 : Collecting Network Packets Off the Wire
    1. Introduction to Passive Network Capture
    2. Writing a Python Packet Sniffer
    3. Capturing Plain-Text Credentials from Network Packets with Python
    4. Introduction to ARP Cache Poisoning
    5. Writing a Python ARP Cache Poisoner
  7. Chapter 7 : Building a Penetration Testing Tool
    1. Introduction to the Metasploit Framework
    2. Writing the Discovery Module
    3. Writing the Exploit Framework
    4. Stitching It All Together with an Interactive Command Shell
    5. Testing MSFPY

Product information

  • Title: Python for Automating Information Security
  • Author(s): Thomas McNeela
  • Release date: May 2020
  • Publisher(s): Packt Publishing
  • ISBN: 9781838828219