Python for Security Course

Lesson 1 • Setting Up the Security Lab

Install Python, virtual environments, and essential security-oriented libraries. Establishes the reproducible workspace used throughout the course.

Lesson 2 • Core Python Syntax Essentials

Cover variables, data types, operators, and control flow. These constructs form the backbone of every security script written later.

Lesson 3 • Working with Files and Exceptions

Read, write, and parse files while handling runtime errors gracefully. Security tools constantly process logs, configs, and reports.

Lesson 4 • Functions and Modular Code

Define reusable functions and organize code into modules. Modularity is critical for maintaining and sharing security tools.

Lesson 1 • Packet Crafting with Scapy

Craft, send, and capture custom packets using the Scapy library. Enables low-level protocol manipulation for advanced network analysis.

Lesson 2 • Python Socket Programming Basics

Create TCP and UDP sockets to send and receive raw data. Directly enables building scanners, listeners, and custom protocol clients.

Lesson 3 • Building a Port Scanner

Develop a multithreaded port scanner from scratch using sockets. Reinforces socket skills while introducing concurrency for speed.

Lesson 4 • TCP/IP and Protocol Fundamentals

Review the OSI model, IP addressing, and transport-layer protocols. Provides the conceptual framework for all network-based security tools.

Lesson 1 • Cryptography Core Concepts

Define encryption, hashing, and digital signatures at a conceptual level. Provides the vocabulary and mental models needed for implementation chapters.

Lesson 2 • Asymmetric Encryption and PKI

Generate RSA key pairs, encrypt data, and sign messages in Python. Connects to real-world PKI workflows used in TLS and code signing.

Lesson 3 • Symmetric Encryption with Python

Encrypt and decrypt data using AES and other symmetric ciphers via the cryptography library. Covers key generation, modes, and padding.

Lesson 4 • Hashing and Data Integrity

Compute and verify cryptographic hashes using Python's hashlib. Directly supports file integrity checking and password storage tasks.

Lesson 1 • Email and Metadata Analysis

Extract and analyze email headers and document metadata for attribution. Metadata often reveals infrastructure and user details not visible in content.

Lesson 2 • Web Scraping for OSINT

Extract publicly available data from websites using requests and BeautifulSoup. Automates manual research tasks performed during target profiling.

Lesson 3 • Aggregating and Reporting OSINT Data

Combine data from multiple sources into structured reports. Teaches data normalization and output formatting for professional deliverables.

Lesson 4 • DNS Enumeration with Python

Query DNS records and brute-force subdomains programmatically. DNS data reveals infrastructure details critical to early-stage reconnaissance.

Lesson 1 • Automating SQL Injection Testing

Detect and exploit SQL injection vulnerabilities using Python request automation. SQL injection remains one of the most impactful web vulnerabilities.

Lesson 2 • API Security Testing with Python

Fuzz REST and GraphQL APIs for injection, authorization, and data exposure flaws. APIs are increasingly the primary attack surface in modern applications.

Lesson 3 • Session and Authentication Attacks

Test session token predictability, CSRF weaknesses, and broken authentication flows. Authentication flaws are a top cause of web application breaches.

Lesson 4 • HTTP Protocol Deep Dive

Examine HTTP methods, headers, cookies, and sessions at a protocol level. Precise protocol knowledge is required to craft effective web attack scripts.

Lesson 1 • Web Application Vulnerability Testing

Test for injection flaws, misconfigurations, and insecure headers using Python HTTP tools. Web apps are the most common attack surface in modern environments.

Lesson 2 • Exploit Development Fundamentals

Understand buffer overflows and shellcode concepts at a Python scripting level. Provides foundational knowledge for reading and adapting public exploits.

Lesson 3 • Password Attacks and Credential Testing

Implement brute-force and dictionary attack scripts against authentication services. Understanding attack mechanics informs stronger defensive controls.

Lesson 4 • Automating Service Vulnerability Checks

Script checks for known misconfigurations and outdated service versions. Builds on port scanning skills to add vulnerability context to scan results.

Lesson 1 • Memory and Disk Forensics Automation

Automate artifact extraction from memory dumps and disk images using Python. Forensic automation reduces analysis time during active incident response.

Lesson 2 • Log Analysis and Event Correlation

Parse system, application, and security logs to detect anomalous patterns. Log analysis is the primary method for identifying compromise in production systems.

Lesson 3 • Static Malware Analysis Techniques

Extract strings, hashes, and metadata from suspicious files without execution. Static analysis is the safest first step in any malware triage workflow.

Lesson 4 • Indicator of Compromise Extraction

Parse files and logs to extract IPs, domains, hashes, and URLs as structured IOCs. Structured IOCs feed detection rules and threat intelligence platforms.

Lesson 1 • Scheduling and Pipeline Automation

Schedule security tasks and build multi-stage pipelines using Python orchestration tools. Automation ensures consistent, repeatable execution of security processes.

Lesson 2 • Designing Security Tool Architecture

Apply software design principles to security tool development for maintainability. Good architecture separates concerns and enables team collaboration on security projects.

Lesson 3 • Integrating with Security Platforms

Connect Python tools to SIEMs, ticketing systems, and threat intelligence platforms via APIs. Integration multiplies tool value by embedding it in existing security workflows.

Lesson 4 • Building a Reusable Security Framework

Create a plugin-based framework that hosts multiple security modules. Frameworks reduce duplication and allow rapid development of new security capabilities.