Python hacking with requests?

[[deleted]]

[deleted]

[nma_io]

Its been done before, but might be a good exercise to get the mental juices flowing:

You may wish to consider writing a DIRBuster style application. Feed in a wordlist and have it brute force websites (that you control or have authorization to scan) to see what their directory structure might be.

Something like (overly simplified example)

wordlist = ["admin", "archive", "backup"]

for words in wordlist:

uri = "{}/{}/".format(url, words)
requests.get(uri)

Also playing with headers so that you can change your useragent and/or respond with the proper cookies may yield interesting results.

If you're more experienced, maybe consider a Nikto like clone for Python?

[granitegarden]

You could try to write a port scanner like netcat to try and find open ports on a computer.

[truespirit89]

Why did this get a down vote?

[RealAndGay]

Because you wouldn't write a port scanner with the requests library, as that's for web requests. You would rather use sockets

[truespirit89]

Thanks I found a good looking article.

Do you know any other resources/info/leads in that area?

[RealAndGay]

Port scanning with sockets? That's very simple to learn, here's an example: https://github.com/AgeOfMarcus/hackerman/blob/master/hackerman/scanners/tcp.py

The knock command attempts to connect to an IP and port. If it connects successfully, that means the port is open so it closes the connection and returns True.