The newest Python resources are on the Python page. For a reading order instead of a date order, see the Python learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2022-10-19 2022 | Python Simple HTTP Server With SSL Certificate (Encrypted Traffic) intermediate | The content discusses setting up a Python Simple HTTP Server with an SSL certificate to enable encrypted traffic. This configuration enhances security by encrypting data transmitted over the network. The SSL certificate ensures secure communication between the server and clients, protecting sensitive information from potential eavesdropping or tampering. By implementing SSL encryption, the Python Simple HTTP Server can provide a more secure environment for data exchange. |
| 2022-09-18 2022 | Python Cybersecurity beginner | The content titled "Python Cybersecurity" likely discusses the intersection of Python programming language and cybersecurity. Python is commonly used in cybersecurity for tasks like scripting, automation, and developing security tools. It is a versatile language known for its simplicity and readability, making it a popular choice among cybersecurity professionals. By leveraging Python's libraries and frameworks, cybersecurity experts can efficiently analyze data, detect vulnerabilities, and enhance security measures. The link provided likely leads to more detailed information on how Python is utilized in the field of cybersecurity. |
| 2022-09-13 2022 | OWASP Pygoat beginner | Library for developers and testers to learn secure coding and application testing. Written in Python with the Django web framework, Pygoat incorporates OWASP Top 10, Mitre CVE, and SANS 25 Top Errors vulnerabilities like XSS and SQLi. It provides source code alongside vulnerabilities, enabling users to identify and fix insecure coding practices. → owasp.org |
| 2022-09-13 2022 | OWASP Pygoat | OWASP Foundation beginner | Library for learning application security, Pygoat is a Python-based platform built on the Django framework. It includes traditional web application vulnerabilities like XSS and SQLi, and allows users to view source code to understand and fix security flaws. Vulnerabilities can be mapped to OWASP Top Ten, MITRE CVE, and SANS Top 25 errors, providing a practical resource for developers and testers to enhance secure coding and testing practices. → owasp.org |
| 2022-08-17 2022 | 10 Killer Automation Scripts For Your Daily Stuff | by Haider Imtiaz | Aug, intermediate | The content provides a list of ten Python scripts designed to automate daily tasks and streamline work processes. These scripts aim to simplify common problems and routines by leveraging automation. By utilizing these scripts, individuals can save time and effort on repetitive tasks, enhancing productivity and efficiency in their daily activities. → python.plainenglish.io |
| 2022-08-17 2022 | Fake webcam for your online meetings, with Python | by Francois Le Roux | C intermediate | The content discusses using Python to create a fake webcam for online meetings when you prefer not to show your real webcam feed. It highlights the scenario of wanting privacy during virtual meetings. The article likely delves into the technical aspects of how to achieve this using Python programming. |
| 2022-08-15 2022 | A Guide to Python Libraries For Pentesters, Ethical Hackers and System Admi beginner | Python is essential for cybersecurity professionals like penetration testers. It is a versatile tool for various tasks due to its wide range of libraries. These libraries are crucial for tasks such as data manipulation, network scanning, and exploit development. Python's flexibility and extensive library support make it a preferred choice for ethical hackers, system administrators, and cybersecurity experts. |
| 2022-08-11 2022 | The Impossible Web Scraping. Scraping a dynamic website with… | by Nyv Mond intermediate | The content discusses the challenges of scraping dynamic websites using Python libraries like Selenium and BeautifulSoup. These tools help navigate and extract data from websites that require interaction or have changing content. Selenium is used for automating web browsers to interact with dynamic elements, while BeautifulSoup parses the extracted HTML content. By combining these tools, users can scrape data from websites that are difficult to access with traditional scraping methods. |
| 2022-08-10 2022 | How to Protect Text Input from XML External Entity (XXE) Attacks using Pyth intermediate XXE | The content discusses the importance of protecting text input from XML External Entity (XXE) attacks using Python. XXE attacks aim to disrupt an application's handling of serialized data. Implementing countermeasures in Python can help prevent these attacks and safeguard the application from potential vulnerabilities. |
| 2022-05-05 2022 | Favorite tweet by @_zwink intermediate Recon | Favorite tweet: Just created a Python script which given a list of /24 IP address ranges, will crawl them, extract domains and subdomains from SSL certs, check the domains, and write out a CSV file o... |
| 2022-04-25 2022 | Favorite tweet by @JasonFord beginner OSINT Recon | Favorite tweet: I'm continuing to work on my python skills to gather data using threat intel APIs. I've shared this script on GitHub that you can use (with your own API key) to query @EmergingThreats... |
| 2022-03-27 2022 | Python Useful Regex Quick Reference beginner | The content highlights the importance of regular expressions (regex) in Python for text processing. It emphasizes that regex is a crucial tool for manipulating and searching text efficiently in Python programming. |
| 2022-03-27 2022 | An Intro To HTTPX beginner | The httpx package is a Python library that provides an alternative to the requests library for making HTTP requests. It offers features like HTTP/2 support, async and await syntax, and better performance. HTTPX aims to be a more modern and efficient tool for handling HTTP requests in Python applications. |
| 2022-03-27 2022 | Python Cybersecurity — Build a Port Scanner intermediate | The content discusses creating a Python script for a port scanner to detect open ports on a network. It provides a tutorial on the implementation process. |
| 2022-03-27 2022 | 10 Advanced Automation Scripts for Your Python Projects intermediate | The content discusses the use of Python for automating tasks in projects. It highlights the importance of automation for handling both interesting and mundane tasks efficiently. The focus is on utilizing Python scripts to automate various processes in projects, making work easier and more streamlined. |
| 2022-03-27 2022 | Hacking and Securing Python Applications intermediate | The content discusses 27 vulnerabilities commonly found in Python applications, including risks like arbitrary file writes, directory traversal, and deserialization. It emphasizes the importance of being vigilant about these vulnerabilities to secure Python applications effectively. |
| 2022-03-27 2022 | 5 Python Libraries That Will Help Automate Your Life beginner | The content discusses five Python libraries that can automate tasks such as sending emails, extracting data from PDFs, and performing data analysis. These libraries offer resources for quick learning and implementation to streamline daily tasks and improve efficiency. |
| 2022-03-27 2022 | Malware extraction in Python with Scapy intermediate | Learn how to extract malware files from network captures using Python and Scapy in under 200 lines of code. This tutorial demonstrates a concise method for extracting malicious files from network traffic, showcasing the power and efficiency of Python programming for cybersecurity tasks. By leveraging Scapy, a powerful packet manipulation tool, users can quickly and effectively identify and extract malware files for further analysis or mitigation. This streamlined approach highlights the effectiveness of Python and Scapy for cybersecurity professionals in handling malicious content within network traffic. |
| 2022-01-15 2022 | Capturing Network Traffic With Python And TShark intermediate | Capturing Network Traffic With Python And TShark |
| 2022-01-15 2022 | 10 Handy Automation Scripts You Should Try Using Python beginner | 10 Handy Automation Scripts You Should Try Using Python |
| 2022-01-03 2022 | Writing fast async HTTP requests in Python intermediate 7 min read | Library for optimizing fast async HTTP requests in Python. This resource details the evolution from basic `requests` iterative calls to threading with `queue` and `threading`, finally arriving at asynchronous programming with `aiohttp`. It covers techniques like using `asyncio.Semaphore` for controlled concurrency and explores the trade-offs between different approaches for handling large volumes of network requests locally, aiming for maximum throughput and efficiency. |
| 2021-12-30 2021 | Golang Offensive Tools with C-Sto and capnspacehook intermediate RCE | Talk featuring Golang offensive tool developers C-Sto and capnspacehook, discussing Go for red teaming, challenges, and future malware trends. Highlights include C-Sto's goWMIexec and BananaPhone, capnspacehook's pandorasbox, and tools like HackBrowserData, go-netscan, sliver, DeimosC2, and garble for obfuscation and reverse engineering. |
| 2021-12-09 2021 | Python 201 for Hackers beginner 1 min read | Library for learning Python for ethical hacking, covering fundamental programming concepts necessary for cybersecurity applications and tool development. This resource is ideal for individuals looking to advance their skills in areas like exploit development and security scripting. The content is structured to build practical abilities, with courses eligible for CEUs and a 24-hour refund policy. |
| 2021-12-06 2021 | How to Brute-Force SSH Servers in Python intermediate 3 min read RCE | Library for brute-forcing SSH servers using Python and the `paramiko` library. This resource details how to implement an SSH brute-force script by iterating through password lists against a target host. It covers connecting to SSH, handling authentication failures and connection timeouts, and utilizing command-line arguments for host, username, and password list input. The script also includes logic to detect and pause on potential rate limiting or quota exceeded errors. |
| 2021-11-28 2021 | Quickstart Web3.py 5.22.0 documentation beginner 2 min read | Library for interacting with the Ethereum blockchain, web3.py offers quickstart documentation covering installation via pip, provider configurations including `EthereumTesterProvider`, `IPCProvider`, `HTTPProvider`, `AsyncHTTPProvider`, `WebSocketProvider`, and `AsyncIPCProvider`. It demonstrates how to connect to local nodes (like Geth on ports 8545 and 8546) and remote node providers, and shows basic usage such as fetching block data via `w3.eth.get_block('latest')`. Further resources on features, APIs, contract interaction, and transaction handling are linked. |
| 2021-11-28 2021 | Quickstart Web3.py 5.23.1 documentation beginner 2 min read | Library documentation for web3.py version 5.23.1 offers a quickstart guide for interacting with the Ethereum blockchain. It details installation via pip, connection methods to Ethereum nodes including IPCProvider, HTTPProvider, and WebSocketProvider, with examples for both local and remote connections. The guide also highlights the use of EthereumTesterProvider for testing and demonstrates how to retrieve block data using `w3.eth.get_block('latest')`. |
| 2021-11-27 2021 | Bit Twiddling in Python beginner | Bit Twiddling in Python |
| 2021-11-20 2021 | Python Scripting for Hackers Part 1: Getting Started beginner 5 min read | Library for learning Python scripting for hacking, covering installation of third-party modules like the `python-nmap` module via `pip` and `wget`, fundamental syntax, formatting importance, running files with `chmod`, and incorporating comments. It emphasizes Python's extensive standard libraries and numerous third-party modules available from PyPI for reconnaissance and other hacking tasks. |
| 2021-11-14 2021 | A Beginners Guide to Python for Cybersecurity beginner 5 min read | Library of Python resources for cybersecurity, detailing its application in penetration testing, automation, and malware analysis. It highlights key libraries like NLTK, NumPy, Pandas, Scikit, Nmap, Twisted, Scapy, Beautiful Soup, Cryptography, YARA, Pymetasploit3, and Mechanize. The entry also touches on its use in SOAR platforms and mentions the Flatiron School's Cybersecurity Engineering Bootcamp for practical application. |
| 2021-11-11 2021 | Game Hacking with Python and cheat engine intermediate RCE | Game Hacking with Python and cheat engine |
| 2021-09-15 2021 | How To Track Phone Number Location With Python intermediate OSINT | How To Track Phone Number Location With Python → python.plainenglish.io |
| 2021-08-25 2021 | API Testing with HTTPie beginner API Sec | API Testing with HTTPie |
| 2021-08-14 2021 | Elliptic Curve Keys Python and Hazmat intermediate | Elliptic Curve Keys Python and Hazmat |
| 2021-08-10 2021 | RSA Signatures Python and Hazmat intermediate | This content likely discusses the implementation and usage of RSA signatures in Python, specifically leveraging the `cryptography.hazmat` library. It would cover how to generate RSA keys, sign data using private keys, and verify signatures using public keys. The focus would be on the practical application of these cryptographic operations within a Python environment, utilizing the robust `hazmat` module for secure and efficient handling of RSA cryptography. |
| 2021-06-15 2021 | Python Cybersecurity beginner OSINT | This content, titled "Python Cybersecurity," appears to be a brief placeholder or topic introduction. It suggests a focus on the intersection of Python programming and cybersecurity. The content is too minimal to extract specific key points, main ideas, or any details regarding bug bounty payouts. It simply indicates that Python is a relevant tool or language within the cybersecurity domain. |
| 2021-06-07 2021 | whey-cewler.py beginner | This content appears to be the name of a Python script, "whey-cewler.py." |
| 2021-01-20 2021 | Accessing the Dark Web with Python intermediate | The content discusses using Python to access the Dark Web by creating new Tor identities. This process allows users to browse the Dark Web confidently and safely. By utilizing Python, individuals can enhance their privacy and security while exploring the hidden corners of the internet. |
| 2019-08-26 2019 | A Python prompt into a running process: debugging with Manhole intermediate 4 min read | Library for live debugging Python processes with the Manhole project. This enables attaching an interactive Python prompt to a running application, allowing developers to inspect state, access objects, and diagnose issues beyond standard logging. It discusses security implications, particularly within containerized environments, and provides methods for exposing specific objects and leveraging the garbage collector for debugging. |
| 2019-08-23 2019 | 10 common security gotchas in Python and how to avoid them intermediate | The content discusses 10 common security pitfalls in Python programming and provides tips on how to avoid them. It emphasizes the challenges of writing secure code and highlights the importance of understanding how to properly use language features, modules, and frameworks to prevent vulnerabilities. By being aware of these common security mistakes and following best practices, developers can enhance the security of their Python applications. |
| 2019-08-23 2019 | How to scrape websites with Python and BeautifulSoup beginner | The content discusses the use of Python and BeautifulSoup for web scraping to extract information from websites efficiently. It highlights the vast amount of data available on the internet and the need for tools like BeautifulSoup to gather and process this information. Web scraping allows users to automate the extraction of data from websites for various purposes. |
| 2016-01-21 2016 | python/scapy DNS sniffer and parser - Stack Overflow intermediate | Library using Scapy to sniff and parse DNS traffic. The provided Python code demonstrates how to capture UDP packets on port 53, distinguishing between DNS queries (DNSQR) and responses (DNSRR), and extracting timestamp information. → stackoverflow.com |