The Web Application Hacker's Handbook Dafydd Stuttard

• Auteur : Dafydd Stuttard
• Editeur : Wiley John + Sons
• Langue : Anglais
• Parution : 01/10/2011
• Format : Moyen, de 350g à 1kg
• Nombre de pages : 864
• Dimensions : 23.8 x 18.9 x 5.0

Biographie
DAFYDD STUTTARD is an independent security consultant, author, and software developer specializing in penetration testing of web applications and compiled software. Under the alias PortSwigger, Dafydd created the popular Burp Suite of hacking tools. MARCUS PINTO delivers security consultancy and training on web application attack and defense to leading global organizations in the financial, government, telecom, gaming, and retail sectors. The authors cofounded MDSec, a consulting company that provides training in attack and defense-based security.

Sommaire
Introduction xxiii Chapter 1 Web Application (In)security 1 Chapter 2 Core Defense Mechanisms 17 Chapter 3 Web Application Technologies 39 Chapter 4 Mapping the Application 73 Chapter 5 Bypassing Client-Side Controls 117 Chapter 6 Attacking Authentication 159 Chapter 7 Attacking Session Management 205 Chapter 8 Attacking Access Controls 257 Chapter 9 Attacking Data Stores 287 Chapter 10 Attacking Back-End Components 357 Chapter 11 Attacking Application Logic 405 Chapter 12 Attacking Users: Cross-Site Scripting 431 Chapter 13 Attacking Users: Other Techniques 501 Chapter 14 Automating Customized Attacks 571 Chapter 15 Exploiting Information Disclosure 615 Chapter 16 Attacking Native Compiled Applications 633 Chapter 17 Attacking Application Architecture 647 Chapter 18 Attacking the Application Server 669 Chapter 19 Finding Vulnerabilities in Source Code 701 Chapter 20 A Web Application Hacker's Toolkit 747 Chapter 21 A Web Application Hacker's Methodology 791 Index 853