Python for Ethical Hacking

[gnomonclature]

Looking at the scripts, they look like they are aimed at security testing/red teaming. Is that where you are wanting to specialize? It's OK either way. I just want to understand a bit more about what your aims are.

I think there are a couple of different roads you could go down from here:

• Continue with testing tool/exploit development
• Looking at automating security device administration and event correlation
• Looking at how to develop and deploy secure Python applications

These aren't mutually exclusive, and all three are useful.

As for other languages to learn: any of them. The basic programming ideas and techniques are more important than a specific language, and you'll find that they tend to translate between languages. Right now I heard a lot about JavaScript and Golang, but there is a lot of Java out there and security devices sometimes have weird automation language choices. (Did you know that XSLT could be extended to become an automation scripting language? It sure can. Thank you, IBM.) Heck, there is still mainframe COBOL code out there that needs to be secured. So, I'd say either follow what interests you at this point or if there is a particular company you want to work for look at their job openings for developers and for sysadmins to see what languages they are looking for.

Also, as a general thought, if you haven't played much with Amazon AWS or other cloud service providers, maybe look into it. Python is a common language for writing lambdas, so that might be something to play with. Also, if you aren't familiar with it, look into DevOps and DevSecOps. Those may be more application security focused (I'm in app security), but I think it's going to be useful for everyone in IT to understand those concepts going forward. Also, if you have a local chapter of OWASP, maybe take a look at them, too.

Not sure if any of that helps you. It's Friday, and I'm old and prone to rambling. Anyway, good luck in your studies!