Chapter 2. Enumeration

In this chapter, we will cover the following topics:

  • Performing a ping sweep with Scapy
  • Scanning with Scapy
  • Checking username validity
  • Brute forcing usernames
  • Enumerating files
  • Brute forcing passwords
  • Generating e-mail addresses from names
  • Finding e-mail addresses from web pages
  • Finding comments in source code

Introduction

When you have identified the targets for testing, you'll want to perform some enumeration. This will help you to identify some potential paths for further reconnaissance or attacks. This is an important step. After all, if you were to try to steal something from a safe, you would first take a look to determine whether or not you'd need a pin, key, or combination, rather than simply attaching a stick of dynamite and ...

Get Python Web Penetration Testing Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.