博客
关于我
强烈建议你试试无所不能的chatGPT,快点击我
Python tools for Penetration Tester
阅读量:5771 次
发布时间:2019-06-18

本文共 5746 字,大约阅读时间需要 19 分钟。

 BTW:非常全了,涉及网络,逆向等等,以后有时间找几个常用的包研究研究~资源匮乏就是纠结,之前不知道有这些,写个脚本还要自己去实现。。。。

Network

  • : send, sniff and dissect and forge network packets. Usable interactively or as a library
  • ,  and : several different Python bindings for libpcap
  • : low-level networking routines, including interface lookup and Ethernet frame transmission
  • : fast, simple packet creation/parsing, with definitions for the basic TCP/IP protocols
  • : craft and decode network packets. Includes support for higher-level protocols such as NMB and SMB
  • : libnids wrapper offering sniffing, IP defragmentation, TCP stream reassembly and port scan detection
  • : read pcap files without libpcap
  • : grep through packet payloads using regular expressions
  • : comprehensive HTTP client library that supports many features left out of other HTTP libraries
  • , enumerate subdomains on a target domain through a wordlist
  • , man-in-the-middle proxy for testing
  • : SSL-capable, intercepting HTTP proxy. Console interface allows traffic flows to be inspected and edited on the fly

Debugging and reverse engineering

  • : reverse engineering framework, includes , PIDA, pGRAPH
  • : scriptable GUI and command line debugger
  • : IDA Pro plugin that integrates the Python programming language, allowing scripts to run in IDA Pro
  • : fully scriptable IA-32 emulator, useful for malware analysis
  • : read and work with Portable Executable (aka PE) files
  • : Python interface to the  x86 disassembling library
  • : Python wrapper for the Microsoft Windows Debugging Engine
  • : intercept calls to API calls inside DLLs, and also arbitrary addresses within the executable file in memory
  • : disassembler library for AMD64, licensed under the BSD license
  • : debugger using ptrace (Linux, BSD and Darwin system call to trace processes) written in Python

Fuzzing

  • : fuzzer development and fuzz testing framework consisting of multiple extensible components
  • : extensible fuzzing framework for generation and mutation based fuzzing
  • : fuzz testing and fault injection API
  • , including , a man-in-the-middle non-deterministic network fuzzer
  • : general purpose XML fuzzer
  • : highly automated and fully customizable web fuzzer (HTTP protocol based application fuzzer)
  • : file fuzzer. Generates mutated files from a list of source files and feeds them to an external program in batches
  • : probe file formats on the fly and protocols with malformed data, based on pre-defined patterns
  • : multi-codec media fuzzer
  • : generate fuzzed files, fuzzed file systems, and file systems containing fuzzed files in order to test the robustness of forensics tools and examination systems
  • : tools used to fuzz applications that use Windows Interprocess Communication mechanisms
  • : perform automated security testing of SOAP based web services
  • : library for parsing and building of data structures (binary or textual). Define your data structures in a declarative manner
  • : simple fuzzer by Felipe Andres Manzano
  • : Python library used to write fuzzing programs

Web

  • : processes proxy logs and reports discovered issues
  • : find web service endpoints and discovery files
  • : browse the Web from a command-line interface. Supports automated Web testing
  • : web testing tool designed to let you painlessly automate and debug your web application
  • : functional and load web tester

Forensics

  • : extract digital artifacts from volatile memory (RAM) samples
  • : read the hibernation file, regardless of Windows version
  • : library for developing digital forensics applications
  • , identify file types from their binary signatures. Now includes Python binding

Malware analysis

  • : command line hexadecimal editor and disassembler, mainly to analyze malware
  • : filter file formats in e-mails, web pages or files. Detects many common file formats and can remove active content
  • : add virus detection capabilities to your Python software
  • , generic JavaScript unpacker: emulates browser functionality to detect exploits that target browser and browser plug-in vulnerabilities
  • : identify and classify malware samples

PDF

  • : analyse, identify and create PDF files (includes ,  and  and mPDF)
  • : Open PDF Analysis Framework. Converts PDF to an XML tree that can be analyzed and modified.
  • : Python wrapper for the Origami Ruby module which sanitizes PDF files
  • : pure Python PDF toolkit: extract info, spilt, merge, crop, encrypt, decrypt...
  • : extract text from PDF files
  • : Python binding for the Poppler PDF library, including Qt4 support

Misc

  • : toolbox of classes for writing small assembly programs in Python
  • : framework for building decorated graphs and developing open-source intelligence modules and ideas, centered on social network services, search engines and instant messaging
  • : enumerate virtual hosts for a given IP address
  • : JSON encoder/decoder, e.g. to use 
  • : command line tool and a python library used to create word lists for use with other penetration testing tools
  • : view and edit a binary stream field by field

Other useful libraries and tools

  • : enhanced interactive Python shell with many features for object introspection, system shell access, and its own special command system
  • : HTML parser optimized for screen-scraping
  • : make 2D plots of arrays
  • : 3D scientific data visualization and plotting
  • : create dynamic graphs in 3D
  • : event-driven networking engine
  • : lightweight SOAP client for consuming Web Services
  • : most complete OpenSSL wrapper
  • : graph library (edges, nodes)
  • : general parsing module
  • : most feature-rich and easy-to-use library for working with XML and HTML in the Python language
  • : control and automate other programs, similar to Don Libes `Expect` system
  • , visual technology to search and automate GUIs using screenshots. Scriptable in 
  •  and : Python bindings for the Qt application framework and GUI library
本文转hackfreer51CTO博客,原文链接:http://blog.51cto.com/pnig0s1992/590485
,如需转载请自行联系原作者
你可能感兴趣的文章
LeetCode36.有效的数独 JavaScript
查看>>
Scrapy基本用法
查看>>
PAT A1030 动态规划
查看>>
自制一个 elasticsearch-spring-boot-starter
查看>>
软件开发学习的5大技巧,你知道吗?
查看>>
java入门第二季--封装--什么是java中的封装
查看>>
【人物志】美团前端通道主席洪磊:一位产品出身、爱焊电路板的工程师
查看>>
一份关于数据科学家应该具备的技能清单
查看>>
机器学习实战_一个完整的程序(一)
查看>>
Web框架的常用架构模式(JavaScript语言)
查看>>
如何用UPA优化性能?先读懂这份报告!
查看>>
这些Java面试题必须会-----鲁迅
查看>>
Linux 常用命令
查看>>
NodeJS 工程师必备的 8 个工具
查看>>
CSS盒模型
查看>>
ng2路由延时加载模块
查看>>
使用GitHub的十个最佳实践
查看>>
全面了解大数据“三驾马车”的开源实现
查看>>
脱离“体验”和“安全”谈盈利的游戏运营 都是耍流氓
查看>>
慎用!BLEU评价NLP文本输出质量存在严重问题
查看>>