Learning Python Web Penetration Testing

This video introduces HTTP, how it works, and the different methods available to communicate with an HTTP server. 

You’ll understand the anatomy of an HTTP request in order to make your own tools. 

We want to learn how to send HTTP request with Python. 

In this video, we are going to learn about HTTP response codes. 

You’ll learn about web application mapping, what it is, and how to do it. 

We want to create a web application crawler to help us map an application. 

We created a basic crawler, but now, we want to make it recursive to cover all the web application content. 

We need to extract information from the web application that will be useful for our Security testing. 

Most applications have resources that are not linked and tools such as crawlers or proxies won’t find. So, we need to discover resources with other methods. 

In order to find more resources that are not linked in a web application, we need to create a brute forcer in order to discover resources using dictionary files. 

We need to improve the results of the brute forcer in order to facilitate the discovery of interesting resources. Let's do just this! 

In this video, we will add the detection of redirections and generate more information about the responses, such as the time it takes the response and the MD5 hash of the content. 

When conducting an analysis of big web applications, having a screenshot of the discovered resources could be very handy. We need to add this capability by taking a screenshot of all the resources that return a 200 status code. 

The most important security control in a web application is the authentication. Let’s learn password testing and the different approaches. 

We want to create a brute forcer for Basic authentication in order to detect the valid passwords for a given user. 

Some applications use an authentication method called Digest authentication, which is stronger and more secure than Basic authentication. We want to add support to this method to our script. 

You learned how to test Basic- and Digest-based authentication, but most of the web application use Form-based authentication, which is the famous login form. In this video, you will learn how we can brute force these forms. 

SQL injection vulnerabilities are one of the most dangerous issues that can affect a Web application. In this section, you will learn what it is, how it works, and see the difference between SQLi and Blind SQLi. 

SQL injection is one of the most dangerous vulnerabilities in a web application. In this video, you will learn what the methods available for detecting it are, and then we will automate the process in Python. 

This video will focus on what an attacker can do after they find a valid SQLi. We will review the options and automate some of them in our script. 

When exploiting SQLi, one the most important parts is to identify the names of the tables in the DB in order to find interesting data. Another important option is reading OS files as we can obtain more passwords and get the source code of the app to find other vulnerabilities. 

Being the proxy is one of the most useful tools in web app security testing. You will learn how it works, why they are used, and finally, the different types of HTTP proxies available. 

In this video, we will introduce mitmproxy and explain why it was chosen to learn about HTTP proxy in Python. 

The main functionality of an HTTP proxy is to intercept and manipulate traffic. In this video, we will note how to do this in mitmproxy. 

In the previous video, we saw how mitmproxy works and how to manipulate the HTTP communication. Now, let’s take a look at how can we put together what we discussed before about SQLi in order to scan for SQLi issues while we browse. 

In this video, we’ll look at wrapping up the course.