Ethical Hacker's Penetration Testing Guide
eBook - ePub

Ethical Hacker's Penetration Testing Guide

,
  1. 472 pages
  2. English
  3. ePUB (mobile friendly)
  4. Available on iOS & Android
eBook - ePub

Ethical Hacker's Penetration Testing Guide

,

About this book

The 'Ethical Hacker's Penetration Testing Guide' is a hands-on guide that will take you from the fundamentals of pen testing to advanced security testing techniques. This book extensively uses popular pen testing tools such as Nmap, Burp Suite, Metasploit, SQLmap, OWASP ZAP, and Kali Linux.A detailed analysis of pentesting strategies for discovering OWASP top 10 vulnerabilities, such as cross-site scripting (XSS), SQL Injection, XXE, file upload vulnerabilities, etc., are explained. It provides a hands-on demonstration of pentest approaches for thick client applications, mobile applications (Android), network services, and wireless networks. Other techniques such as Fuzzing, Dynamic Scanning (DAST), and so on are also demonstrated. Security logging, harmful activity monitoring, and pentesting for sensitive data are also included in the book. The book also covers web security automation with the help of writing effective python scripts.Through a series of live demonstrations and real-world use cases, you will learn how to break applications to expose security flaws, detect the vulnerability, and exploit it appropriately. Throughout the book, you will learn how to identify security risks, as well as a few modern cybersecurity approaches and popular pentesting tools.

Frequently asked questions

Yes, you can cancel anytime from the Subscription tab in your account settings on the Perlego website. Your subscription will stay active until the end of your current billing period. Learn how to cancel your subscription.
No, books cannot be downloaded as external files, such as PDFs, for use outside of Perlego. However, you can download books within the Perlego app for offline reading on mobile or tablet. Learn more here.
Perlego offers two plans: Essential and Complete
  • Essential is ideal for learners and professionals who enjoy exploring a wide range of subjects. Access the Essential Library with 800,000+ trusted titles and best-sellers across business, personal growth, and the humanities. Includes unlimited reading time and Standard Read Aloud voice.
  • Complete: Perfect for advanced learners and researchers needing full, unrestricted access. Unlock 1.4M+ books across hundreds of subjects, including academic and specialized titles. The Complete Plan also includes advanced features like Premium Read Aloud and Research Assistant.
Both plans are available with monthly, semester, or annual billing cycles.
We are an online textbook subscription service, where you can get access to an entire online library for less than the price of a single book per month. With over 1 million books across 1000+ topics, we’ve got you covered! Learn more here.
Look out for the read-aloud symbol on your next book to see if you can listen to it. The read-aloud tool reads text aloud for you, highlighting the text as it is being read. You can pause it, speed it up and slow it down. Learn more here.
Yes! You can use the Perlego app on both iOS or Android devices to read anytime, anywhere — even offline. Perfect for commutes or when you’re on the go.
Please note we cannot support devices running on iOS 13 and Android 7 or earlier. Learn more about using the app.
Yes, you can access Ethical Hacker's Penetration Testing Guide by in PDF and/or ePUB format. We have over one million books available in our catalogue for you to explore.

Information

Publisher
BPB Publications
eBook ISBN
9789355512208
Edition
0
Topic
Computer Science
Index
Computer Science

Table of contents

  1. Cover Page
  2. Title Page
  3. Copyright Page
  4. Foreword
  5. Dedication Page
  6. About the Author
  7. About the Reviewer
  8. Acknowledgement
  9. Preface
  10. Errata
  11. Table of Contents
  12. 1. Overview of Web and Related Technologies and Understanding the Application
  13. 2. Web Penetration Testing – Through Code Review
  14. 3. Web Penetration Testing – Injection Attacks
  15. 4. Fuzzing, Dynamic Scanning of REST API, and Web Application
  16. 5. Web Penetration Testing – Unvalidated Redirects/Forwards, SSRF
  17. 6. Pentesting for Authentication, Authorization Bypass, and Business Logic Flaws
  18. 7. Pentesting for Sensitive Data, Vulnerable Components, Security Monitoring
  19. 8. Exploiting File Upload Functionality and XXE Attack
  20. 9. Web Penetration Testing: Thick Client
  21. 10. Introduction to Network Pentesting
  22. 11. Introduction to Wireless Pentesting
  23. 12. Penetration Testing - Mobile App
  24. 13. Security Automation for Web Pentest
  25. 14. Setting Up Pentest Lab
  26. Index