UDP pcap replay with Scapy

Описание

#cybersecurity #networksecurity #python
teaser for my new Network Security Cybersecurity course on Udemy

https://www.udemy.com/course/hands-on-network-security-basics/

00:00 Introduction
02:11 Goal
02:40 Task Breakdown
03:35 Preparation (UDP traffic generation)
04:34 Scapy basics
06:09 Scripting
06:44 Replay failure - Root cause analysis
08:50 Replay succeeded
09:03 Rebuild the modified PCAP
09:46 UDPreplay
============================
This course is essential training for someone who wants to learn network security.
Everything in this course is based on real-world questions that I collected /arranged for days one, two, or three of network security training.

contents at a glance (*contents will updated/added without prior notice)
- Scapy pcap analysis
- Scapy pcap replay (UDP)
- ARP scan detection with Scapy
- Routing/ Traffic filtering issue analysis and correction in Docker environment
- Covert tunneling analysis
- Scapy TCP client vs Web Application Firewall
- JavaScript mini challenge (first step to Browser automation)
- Template Text parser(Python TTP) for Network Security

how I made this course:
- collected half-answered or unanswered network security-related questions from famous tech QA sites and security vendors' community sites.
- picked easy to intermediate ones
- made complete answers to them (**really time-consuming!**)
- arranged QAs so we can replicate the issues individually (**insanely time-consuming!**)

intended audience :

- Software developers who usually don't handle NW security problems
- Customer Success engineers who want to analyze NW security problems quickly in an isolated environment
- NW engineers who are having a hard time understanding weird NGFW UTM /Sandbox alerts

what we're going to do:

- Generate malicious traffic using popular tools and feed that traffic to pcap analysis tools to see how they analyze the traffic.
- Play with Brim ( pcap analysis tool powered by Zeek and Suricata with SEIM-like searching interface).
- learn practical network layering for troubleshooting
- code Python scapy to analyze layer two attack
- solve real-world routing/filtering issues in Docker environment
- analyze typical covert tunneling methodologies