Penetration Tester's Guide to Web Applications
eBook - PDF

Penetration Tester's Guide to Web Applications

,
  1. 280 pages
  2. English
  3. PDF
  4. Available on iOS & Android
eBook - PDF

Penetration Tester's Guide to Web Applications

,

About this book

This innovative new resource provides both professionals and aspiring professionals with clear guidance on how to identify and exploit common web application vulnerabilities. The book focuses on offensive security and how to attack web applications. It describes each of the Open Web Application Security Project (OWASP) top ten vulnerabilities, including broken authentication, cross-site scripting and insecure deserialization, and details how to identify and exploit each weakness. Readers learn to bridge the gap between high-risk vulnerabilities and exploiting flaws to get shell access. The book demonstrates how to work in a professional services space to produce quality and thorough testing results by detailing the requirements of providing a best-of-class penetration testing service. It offers insight into the problem of not knowing how to approach a web app pen test and the challenge of integrating a mature pen testing program into an organization. Based on the author's many years of first-hand experience, this book provides examples of how to break into user accounts, how to breach systems, and how to configure and wield penetration testing tools.

Frequently asked questions

Yes, you can cancel anytime from the Subscription tab in your account settings on the Perlego website. Your subscription will stay active until the end of your current billing period. Learn how to cancel your subscription.
At the moment all of our mobile-responsive ePub books are available to download via the app. Most of our PDFs are also available to download and we're working on making the final remaining ones downloadable now. Learn more here.
Perlego offers two plans: Essential and Complete
  • Essential is ideal for learners and professionals who enjoy exploring a wide range of subjects. Access the Essential Library with 800,000+ trusted titles and best-sellers across business, personal growth, and the humanities. Includes unlimited reading time and Standard Read Aloud voice.
  • Complete: Perfect for advanced learners and researchers needing full, unrestricted access. Unlock 1.4M+ books across hundreds of subjects, including academic and specialized titles. The Complete Plan also includes advanced features like Premium Read Aloud and Research Assistant.
Both plans are available with monthly, semester, or annual billing cycles.
We are an online textbook subscription service, where you can get access to an entire online library for less than the price of a single book per month. With over 1 million books across 1000+ topics, we’ve got you covered! Learn more here.
Look out for the read-aloud symbol on your next book to see if you can listen to it. The read-aloud tool reads text aloud for you, highlighting the text as it is being read. You can pause it, speed it up and slow it down. Learn more here.
Yes! You can use the Perlego app on both iOS or Android devices to read anytime, anywhere — even offline. Perfect for commutes or when you’re on the go.
Please note we cannot support devices running on iOS 13 and Android 7 or earlier. Learn more about using the app.
Yes, you can access Penetration Tester's Guide to Web Applications by in PDF and/or ePUB format. We have over one million books available in our catalogue for you to explore.

Table of contents

  1. Preface
  2. 1 Introduction
  3. 2 OWASP A1:2017 Injection
  4. 3 OWASP A2:2017 Broken Authentication
  5. 4 OWASP A3:2017 Sensitive Data Exposure
  6. 5 OWASP A4:2017 XML External Entities (XXE)
  7. 6 OWASP A5:2017 Broken Access Control
  8. 7 OWASP A6:2017 Security Misconfiguration
  9. 8 OWASP A7:2017 Cross-Site Scripting (XSS)
  10. 9 OWASP A8:2017 Insecure Deserialization
  11. 10 OWASP A9:2017 Using COmponents with Known Vulnerabilities
  12. 11 OWASP A10:2017 Insufficient Logging and Monitoring
  13. 12 Beyond OWASP Top 10
  14. 13 Testing as a Consultant and Adding Value
  15. About the Author
  16. Index