|
||||||||||||||||||||
|
||||||||||||||||||||
|
||||||||||||||||||||
|
There is a newer edition of this item:
|
Frequently Bought Together
Product Details
|
Product Description
Review
"If you have an interest in web application security, I would highly recommend picking up a copy of this book, especially if you’re interested in being able to audit applications for vulnerabilities".
—Robert Wesley McGrew, McGrew Security
—Robert Wesley McGrew, McGrew Security
Product Description
This book is a practical guide to discovering and exploiting security flaws in web applications. The authors explain each category of vulnerability using real-world examples, screen shots and code extracts. The book is extremely practical in focus, and describes in detail the steps involved in detecting and exploiting each kind of security weakness found within a variety of applications such as online banking, e-commerce and other web applications.
The topics covered include bypassing login mechanisms, injecting code, exploiting logic flaws and compromising other users. Because every web application is different, attacking them entails bringing to bear various general principles, techniques and experience in an imaginative way. The most successful hackers go beyond this, and find ways to automate their bespoke attacks. This handbook describes a proven methodology that combines the virtues of human intelligence and computerized brute force, often with devastating results.
The authors are professional penetration testers who have been involved in web application security for nearly a decade. They have presented training courses at the Black Hat security conferences throughout the world. Under the alias "PortSwigger", Dafydd developed the popular Burp Suite of web application hack tools.
Inside This Book
(Learn More)
Tag this product(What's this?)Think of a tag as a keyword or label you consider is strongly related to this product.
Tags will help all customers organize and find favorite items. |
What Other Items Do Customers Buy After Viewing This Item?
Customer Reviews
|
Share your thoughts with other customers:
|
||||||||||||||||||||||
|
Most helpful customer reviews
2 of 2 people found the following review helpful:
5.0 out of 5 stars
Fantastic book with great coverage of Web apps threats,
By
This review is from: The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws (Paperback)
Written for a hacker? Not really! The book succeeds at showing Web application vulnerabilities and how to effectively defend from the possible attacks these would allow.
We are using it in our company as the guideline for securing an important Web application and it has covered all issues automated test tools from Rational reported. I find the book is very well written and explains concepts with clarity, I just could not stop reading it, it's a really interesting book!
1 of 1 people found the following review helpful:
5.0 out of 5 stars
Wonderful introduction to the topic of web application security,
By
This review is from: The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws (Paperback)
This is a great resource for anyone looking for an introduction to web application security and no clue where to start. It begins with the background information you will need to work through many of the techniques that are introduced in the later chapters.
0 of 2 people found the following review helpful:
4.0 out of 5 stars
Contains some priceless tricks,
By
This review is from: The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws (Paperback)
I found section 5.10.4 on page 696 most interesting.
This is especially important since the cookie path defaults to the current location without the trailing slash ([...]) I was able to reproduce this behavior on IE6, IE7, IE8, Safari 3 and even Netscape Communicator 4.79 :-) However with Firefox or Chrome, cookies set on path "/bank" cannot be accessed from resources located under "/banktest/".
Share your thoughts with other customers: Create your own review
Want to see more reviews on this item?
|
|
Listmania!
Look for similar items by category
- Books > Computers & Internet > Business & Culture > Hacking
- Books > Computers & Internet > Business & Culture > Privacy
- Books > Computers & Internet > Certification Central > Exams > Security+
- Books > Computers & Internet > Networking > Network Security
- Books > Computers & Internet > Networking > Networks, Protocols & APIs
- Books > Computers & Internet > Web Development > Web Services
- Books > New & Used Textbooks > Computer Science & Information Systems
Look for similar items by subject
Feedback
Would you like to update product info or give feedback on images?
|
