This advanced, challenge-only capstone asks you to complete three small Python security utilities: a reconnaissance collector, a log-hunting tool, and a unified service and path enumerator. You will turn local socket, HTTP, and log inputs into consistent JSON, text, and alert artifacts.
Starter files define the functions and output contracts, but the working logic is yours to implement. All network activity stays on simulated loopback services, so the focus remains on reliable automation rather than external scanning or exploitation.
What You Will Learn
- Capture an SSH-like banner over a raw TCP socket from JSON-configured input
- Query a local HTTP endpoint with Requests and preserve status and body data
- Normalize heterogeneous reconnaissance results into a consistent JSON schema
- Read and clean access-log lines for repeatable downstream analysis
- Extract SQL injection-style requests with a predefined regular expression
- Count source-IP hits and emit alerts only when a threshold is exceeded
- Scan configured TCP ports and distinguish reachable HTTP services from other sockets
- Enumerate candidate web paths, retain
200and403results, and consolidate the workflow output
Who This Course Is For
This course is for experienced Python learners who have already practiced functions, files, JSON, regular expressions, sockets, and HTTP requests and want an independent security-automation capstone. It suits aspiring security engineers, penetration testers, and detection analysts who need to convert manual checks into repeatable utilities.
Prerequisites: Strong Python 3 and Linux shell skills; familiarity with functions, exceptions, file I/O, JSON serialization, regular expressions, counters, TCP sockets, HTTP status codes, and the Requests library.
Learning environment: An Ubuntu 22.04 LabEx VM with starter Python scripts, a six-line synthetic access log, JSON and wordlist inputs, and local simulated TCP and HTTP services on 127.0.0.1. Python 3 and Requests are provided.
Frequently Asked Questions
Is this a guided Python course?
No. It is an advanced capstone with three challenge-based assessments. Requirements and example output shapes are provided, but you must implement and debug each function yourself.
Do I write every program from a blank file?
No. Each challenge supplies a starter script with constants, function stubs, and output-writing code. You implement the missing collection, parsing, alerting, scanning, and enumeration logic.
Will the tools scan external systems?
No. Socket connections and HTTP requests target only simulated services on 127.0.0.1, and the log source is a local synthetic file. No Internet target or cloud account is involved.
Does the unified toolkit exploit vulnerabilities?
No. It checks a short configured port list, identifies the HTTP-like service, and records interesting paths that return 200 or 403. It does not exploit endpoints, modify firewall rules, or establish shells.
