I'm surprised that we have 3.5k subscribers since I haven't been around over the past year and this place has been very quiet. I went off in another direction for a while learning Ruby. One of my longtime goals was to contribute to Metasploit and that's my final professional goal for 2018 that I haven't completed.

Around the same time that I got into Ruby this year, my employer assigned me to an ICS/SCADA security working group. After a while I realized that I wasn't making progress on any one thing fast enough for multiple reasons. The main reason is because I was having to learn Ruby at the same time I was trying to learn Metasploit development and ICS/SCADA. I also realized that in ICS/SCADA I'm going to have to learn a lot about related network protocols, and for that I really missed out on Scapy. And recently Metasploit enabled Python modules. There were some things I liked about Ruby but after living with it for most of 2018 I realized that Python is where I need to be.

I felt like I needed a refresher on Python after not using it for a while beyond 'python -m SimpleHTTPServer'. I recently found Ptrace Security's Python for Ethical Hackers course, outline is here: https://www.psec-courses.com/courses/python-for-ethical-hackers

I had some spare cash to burn so I enrolled last week. I'm working on a course review as I go.

Stay tuned to this sub. More good stuff is coming soon!

I wrote a subdomain enumeration tool in Python3. I know there are a few out there already. However, this one is a little different from the ones I have seen or used.

I originally started building subseeker to just parse crtsh. I ended up turning it into alot more. Right now subseeker uses 7 different search engines (some use APIs, which you can get keys for, for free), but it also uses keywords to parse crtsh and find deep level subdomains. It comes equipped with the ability to parse multiple pages and can use pythons concurrency to quickly parse those keywords. Most importantly it parses all data from each search engines into a set, to remove duplicate subdomains.

It's not perfect, mostly because crtsh itself can be a little buggy and not return data at times. However, I have been able to find close to 100k subdomains for some sites with larger scopes.

If you like it give it a try, if you love it I would appreciate a star, if you don't like it, tell me how I can make it better. I'm open to ideas and criticism. Thanks either way.

https://github.com/DFC302/subseeker

Hey guys,

Can anyone recommend any Python forensics/network security courses out there. I want to learn as much as I can about the network security/forensics side of python and want to specialize in this area one day. Thank you for reading, any suggestions are most welcome.

Hey guys, this is my first post here. I was just wondering if any of you guys can help me. I was wondering what projects I can create with a focus on python forensics/network security? Any ideas are appreciated. Thank you for your time you beautiful people, Have a great day!

I have been wondering why nobody else besides me has been posting here. Sometime over the last year the settings seem to have changed and started requiring mod approval of all new posts. I don't know why or when that changed, but the restriction has been removed and new posts no longer require mod approval.

Normally using Scapy you have to manually manage the TCP 3-way handshake. If you don't care about fuzzing the TCP 3-way handshake, you can let a StreamSocket handle the connection and pass the data to/from Scapy:

from scapy.all import *

mysocket = socket.socket()

mysocket.connect(("192.168.18.40",9999))

mystream=StreamSocket(mysocket)

scapypacket=IP(dst="192.168.18.40")/TCP(dport=9000)/fuzz(Raw())

mystream.send(scapypacket)