Автоматизируем пентест с помощью Python

Тестирование на проникновение всегда ограничено во времени. Если черные хакеры (или просто хакеры) могут потратить недели и месяцы на проведение APT атаки, то белые хакеры не могут позволить себе такую роскошь. Есть договор на проведение пентеста и в этом договоре четко указаны сроки. Для того, чтобы пентест был максимально эффективным, используются различные инструменты автоматизации, однако очень часто бывает так, что удобнее всего использовать собственные скрипты, так как часто возникает необходимость в некоторой кастомизации, когда нужно немного изменить код скрипта и конечно лучше менять то в чем хорошо разбираешься.

https://habr.com/ru/companies/otus/articles/886022/

https://github.com/thegoodduck/netsour #spying #python #scapy

Selbstheilende Testfälle ein technischer Mythos oder Realität?
Selbstheilende was......

https://youtu.be/dJObuTlabn0

Nun erst mal ja, es gibt technische Möglichkeiten, selbstheilende Test
https://www.dev-crowd.com/2024/10/24/selbstheilende-testfaelle-ein-technischer-mythos-oder-realitaet/
#Mocking #MutationTesting #OwaspZap #Penetrationtest #Python #RegressionsTest #Requests #RestAPI #Sandboxtesting #Scapy #Security #Selenium #Server #SystemTestNetzwerk #Testframework #Webdriver

Hello everyone.

I shared a repo on github called Scapy Network Security Tools due to many requests,

I wish everyone good work, you can star the repo for your support, I am also waiting for your pull requests to update it

https://github.com/HalilDeniz/Scapy-Network-Security-Tools

Hello everyone.
In today's article, we examine scapy in detail and implement 3 different coding examples

I wish everyone a good reading:
https://denizhalil.com/2024/10/08/scapy-network-analysis-security/

Hello everyone.

We have updated our book that I published a short time ago in the most perfect way. It consists of 120 pages and 50 sections in total.

https://buymeacoffee.com/halildeniz/e/296372

hello everyone.

in today's article we do arp sniffing with python and check requests/replies

i wish everyone a good reading
https://denizhalil.com/2024/09/07/arp-sniffing-scapy/

Hello everyone,

in today's article we learn how to listen to an encrypted and unencrypted network and decrypt the packets

I wish everyone good work and reading:

https://denizhalil.com/2023/10/17/network-traffic-decryption-python-scapy/

Creating an FTP Listener with Scapy for Network Security

https://denizhalil.com/2024/03/21/creating-an-ftp-listener-with-scapy-for-network-security/

#Scapy: The Packet Manipulation Library

https://www.opensourceforu.com/2024/08/scapy-the-packet-manipulation-library/

【Docker】USER=rootの代わりにsudoを使う
https://qiita.com/sigma_devsecops/items/028132c5b879a6fa6e02?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

Moderne Regressionstests in der Cybersicherheit: Ein Paradigmenwechsel – Teil 1 neuer Ansatz, neuer Workflow

https://www.dev-crowd.com/2024/08/10/moderne-regressionstests-in-der-cybersicherheit-ein-paradigmenwechsel-teil-1-neuer-ansatz-neuer-workflow/
#Engineering #Mocking #MutationTesting #OwaspZap #PenetrationTest #Penetrationtest #Programmierung #Python #RegressionsTest #Requests #RestAPI #Sandboxtesting #Scapy #Security #Selenium #SystemTestNetzwerk #TestEngineering #Testframework #Testl

What have I learned this week?

- Use #scapy to manipulate/anonymize a pcap
- #Typst looks like markdown/pandoc but better to create documents. Need to try it.. Won't really work for figures and slides though (well, it does but minimal)
- Existence of #go-diskfs, a library to manipulate disks, partitions.

If you want to create your custom #packetsniffer based on #Scapy, the recent webcast by #ActiveCountermeasures could be a good starting point.
Bill provided nice explanation and his sniffer template is available on GitHub.

https://github.com/activecm/sniffer-template

https://www.youtube.com/watch?v=gO3OjyyLN40

The art of packet crafting with #scapy - an intense #python #workshop https://buff.ly/3ST486L

Packet Crafting and Network Exploration with Scapy
According to its main page,

Scapy is a powerful interactive packet manipulation library written in Python. Scapy is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, match requests and replies, and much more.
https://scapy.net/

Install

Depending on your OS a
https://www.rffuste.com/2024/01/22/packet-crafting-and-network-exploration-with-scapy/
#General #Tutoriales #scapy #tools

Come learn #IPv6 Network Security with #Scapy this February with Guillaume Valadon! Get a full understanding of IPv6 attacks and defenses. No prior IPv6 knowledge is required. the course uses cloud-based VMs so you don't have to worry about configuring your own systems for IPv6. Simply the best way to learn IPv6 from someone who's been teaching it since 2009 https://ringzer0.training/trainings/ipv6-network-security-with-scapy.html

Two new @greynoise goodies for y’all from the Labs team:

— a new blog post on how to extract HTTP payloads from the PCAPs generated by our Early Access Program sensors: https://www.greynoise.io/blog/quickly-triaging-http-traffic-from-greynoises-new-hosted-sensors using #python's #scapy in #RStats via the {reticulate} package (you can just use the python code tho if you're "one of those" ppl)

— a new @observablehq — https://observablehq.com/@greynoise/top-level-gnql-summary-stats — that shows summary stats from high-level GNQL queries like “vpn”, “classification”, etc.

Barely-AP is just barely a Wifi Access Point. It supports WPA2 with AES-128 and lets stations rx/tx IP traffic over a tap device. I've wanted to put something like this together for awhile now, and here it is: https://github.com/spr-networks/barely-ap/

First time in months (years?) that I have to do some packet creation with #Scapy. And the last VM with all the earlier recipes is gone. I feel like a noob again.