analyzing web applications is absolutely critical for an attacker or penetration tester in most modern networksweb applications present the largest attack surface and so are also the most common avenue for gaining access there are number of excellent web application tools that have been written in pythonincluding afsqlmapand others quite franklytopics such as sql injection have been beaten to deathand the tooling available is mature enough that we don' need to reinvent the wheel insteadwe'll explore the basics of interacting with the web using pythonand then build on this knowledge to create reconnaissance and brute-force tooling you'll see how html parsing can be useful in creating brute forcersrecon toolingand mining text-heavy sites the idea is to create few different tools to give you the fundamental skills you need to build any type of web application assessment tool that your particular attack scenario calls for