This Github repository is dedicated to helping new/aspiring Pentesters utilize Python for their security needs. It includes scripts, cheatsheets, and tutorials on how to use Python for pentesting purposes aslo resources to learn from. Learn how to use Python for enumeration, vulnerability scanning, and exploitation.The repository also covers more advanced topics such as creating custom tools, developing exploits, and writing custom payloads. Whatever your Python pentesting needs, this repository has you covered.
๐๐๐ฌ๐จ๐ฎ๐ซ๐๐๐ฌ: First you shoul know the very basic of Python, how python is different from other programming langugaes, why you should choose python for as your scripting language and blah blah...
- Well I'm certainly not going to copy paste youtube links teahing python for general/developement use. So I'm assuming you are alredy familiar with basic of python (variables, operators, strings, lists, tuples, loops, dictionaries, file I/O, functions, OOP, pip installer, sockets, debugging, modules, and exception handling.)
๐๐๐ญ'๐ฌ ๐ฆ๐จ๐ฏ๐ ๐ญ๐จ ๐ญ๐ก๐ ๐ฆ๐๐ข๐ง ๐ฌ๐๐ฎ๐๐, ๐ฅ๐๐๐ซ๐ง๐ข๐ง๐ ๐๐ฒ๐ญ๐ก๐จ๐ง ๐๐จ๐ซ ๐๐ฒ๐๐๐ซ๐ฌ๐๐ -
- https://www.youtube.com/watch?v=fNzpcB7ODxQ&t=2481s (The Cyber Mentor aka TCM) one of the most famous cybersec instructor out there with years of teaching/professional experience in cybersec domain.
- https://www.youtube.com/watch?v=9F6zAuYtuFw (edureKa) there youtube channel teaching many-many things related to IT one of videos is about scripting in python.
Enough of the Youtube videos --
- https://tryhackme.com/room/pythonforcybersecurity (you can also learn Python for Pentesters from Tryhackme site ) great begginer friendly resources
๐๐๐ฅ๐ฅ, ๐ง๐จ๐ฐ ๐'๐ฆ ๐๐ฌ๐ฌ๐ฎ๐ฆ๐ข๐ง๐ ๐ฒ๐จ๐ฎ ๐๐ซ๐ ๐ฌ๐จ๐ฆ๐๐ฐ๐ก๐๐ญ ๐๐๐ฆ๐ข๐ฅ๐ข๐๐ซ ๐ฐ๐ข๐ญ๐ก ๐ญ๐ก๐ ๐๐๐ฌ๐ข๐๐ฌ ๐จ๐ ๐ฌ๐๐ซ๐ข๐ฉ๐ญ๐ข๐ง๐ . ๐๐จ๐ฐ ๐ฅ๐๐ญ๐ฌ ๐๐จ ๐ฌ๐จ๐ฆ๐ ๐จ๐ ๐ญ๐ก๐ ๐๐๐ฌ๐ข๐ ๐ญ๐๐ฌ๐ค๐ฌ ๐ข๐ง ๐จ๐ซ๐๐๐ซ ๐ญ๐จ ๐ ๐๐ญ ๐จ๐ฎ๐ซ๐ฌ๐๐ฅ๐ฏ๐๐ฌ ๐๐๐ฆ๐ข๐ฅ๐ข๐๐ซ ๐ฐ๐ข๐ญ๐ก ๐ฉ๐ฒ๐ญ๐ก๐จ๐ง ๐๐ฌ ๐ ๐ฉ๐๐ง๐ญ๐๐ฌ๐ญ๐ข๐ง๐ ๐ฅ๐๐ง๐ ๐ฎ๐๐ ๐ :)
First we will start with some basic tasks -
- ๐ฆ๐๐ฏ๐ฑ๐ผ๐บ๐ฎ๐ถ๐ป ๐ฒ๐ป๐๐บ๐ฒ๐ฟ๐ฎ๐๐ถ๐ผ๐ป: Subdomain enumeration is the process of discovering the different subdomains associated with a given domain name. It is commonly used by security researchers to identify vulnerabilities in web applications and networks.