Python libraries developed to interact with remote servers running different services like FTP, HTTP, SSH can be used to launch/automate different attacks. In this section, we will cover different types of live servers and perform interaction/attacks on those using Python.

What will you learn?

• Automating interaction with FTP, SSH, HTTP servers

• Automating Nmap scans

References:

1. FTPlib documentation (https://docs.python.org/3/library/ftplib.html)

2. Paramiko (http://www.paramiko.org/)

3. Python-nmap (https://xael.org/pages/python-nmap-en.html)  

4. PExpect documentation (https://pexpect.readthedocs.io/en/stable/)

Labs Covered:

• Attacking FTP Servers

  In this lab, you will learn to perform dictionary attacks and automate interaction on the FTP server using the ftplib Python library.

  
  

• Attacking SSH Servers

  In this lab, you will learn to perform dictionary attacks and automate interaction on the SSH server using the paramiko Python library.

  
  

• Attacking Web Portals

  In this lab, you will learn to perform dictionary attacks and automate interaction on the web server using the request and beautiful soup Python libraries.

  
  

• Automating Nmap Scans

  In this lab, you will learn to automate Nmap scans using Python-nmap Python library.

  
  

• Automating FTP Interaction

  In this lab, you will learn to automate interaction with an FTP server using the pexpect Python library.

  
  

• Banner and Information Grabbing

  In this lab, you will learn to perform banner grabbing and fingerprinting different services using various Python libraries and socket programming.