Attacking and Exploiting Modern Web Applications | Discover the mindset, techniques, and tools to perform modern web attacks and exploitation
Language: English
Published by Packt Publishing, 2023
- Softcover
- New



Condition: New
£ 47.50
Quantity: 5 available
Add to basketItem description from seller
Attacking and Exploiting Modern Web Applications | Discover the mindset, techniques, and tools to perform modern web attacks and exploitation | Simone Onofri (u. a.) | Taschenbuch | Englisch | 2023 | Packt Publishing | EAN 9781801816298 | Verantwortliche Person für die EU: Libri GmbH, Europaallee 1, 36244 Bad Hersfeld, gpsr[at]libri[dot]de | Anbieter: preigu Print on Demand.
Seller Inventory # 127384373
- Title
- Attacking and Exploiting Modern Web Applications | Discover the mindset, techniques, and tools to perform modern web attacks and exploitation
- Author
- Simone Onofri (u. a.)
- Publisher
- Packt Publishing
- Publication year
- 2023
- Condition
- Neu
- Binding
- Taschenbuch
- Language
- English
- ISBN 10
- 1801816298
- ISBN 13
- 9781801816298
- Item weight
- 633 grams
- Dimensions
- 235 x 191 x 18 mm
- Seller catalogs
- Bücher
A comprehensive guide to effectively understand web attacks for web application security, featuring real-world bug bounty hunting techniques, CVEs, and CTFs
Purchase of the print or Kindle book includes a free PDF eBook
Key Features
- Learn how to find vulnerabilities using source code, dynamic analysis, and decompiling binaries
- Find and exploit vulnerabilities such as SQL Injection, XSS, Command Injection, RCE, and Reentrancy
- Analyze real security incidents based on MITRE ATT&CK to understand the risk at the CISO level
Book Description
Web attacks and exploits pose an ongoing threat to the interconnected world. This comprehensive book explores the latest challenges in web application security, providing you with an in-depth understanding of hackers' methods and the practical knowledge and skills needed to effectively understand web attacks.
The book starts by emphasizing the importance of mindsets and toolsets in conducting successful web attacks. You’ll then explore the methodologies and frameworks used in these attacks, and learn how to configure an environment using interception proxies, automate tasks with Bash and Python, and set up a research lab. As you advance through the book, you’ll discover how to attack the SAML authentication layer; attack front-facing web applications by learning WordPress and SQL injection, and exploit vulnerabilities in IoT devices, such as command injection, by going through three CTFs and learning about the discovery of seven CVEs. Each chapter analyzes confirmed cases of exploitation mapped with MITRE ATT&CK. You’ll also analyze attacks on Electron JavaScript-based applications, such as XSS and RCE, and the security challenges of auditing and exploiting Ethereum smart contracts written in Solidity. Finally, you’ll find out how to disclose vulnerabilities.
By the end of this book, you’ll have enhanced your ability to find and exploit web vulnerabilities.
What you will learn
- Understand the mindset, methodologies, and toolset needed to carry out web attacks
- Discover how SAML and SSO work and study their vulnerabilities
- Get to grips with WordPress and learn how to exploit SQL injection
- Find out how IoT devices work and exploit command injection
- Familiarize yourself with Electron JavaScript-based applications and transform an XSS to an RCE
- Discover how to audit Solidity’s Ethereum smart contracts
- Get the hang of decompiling, debugging, and instrumenting web applications
Who this book is for
This book is for anyone whose job role involves ensuring their organization's security – penetration testers and red teamers who want to deepen their knowledge of the current security challenges for web applications, developers and DevOps professionals who want to get into the mindset of an attacker; and security managers and CISOs looking to truly understand the impact and risk of web, IoT, and smart contracts. Basic knowledge of web technologies, as well as related protocols is a must.
Table of Contents
- Mindset and Methodologies
- Toolset for Web Attacks and Exploitation
- Attacking the Authentication Layer – a SAML Use Case
- Attacking Internet-Facing Web Applications – SQL Injection and Cross-Site Scripting (XSS) on WordPress
- Attacking IoT Devices – Command Injection and Path Traversal
- Attacking Electron JavaScript Applications – from Cross-Site Scripting (XSS) to Remote Command Execution (RCE)
- Attacking Ethereum Smart Contracts – Reentrancy, Weak Sources of Randomness, and Business Logic
- Continuing the Journey of Vulnerability Discovery
"Synopsis" may belong to another edition of this title.
About the Author
"About the title" may belong to another edition of this title.
Shipping rates from Germany to U.S.A.
| Item | 60 to 60 business days | 60 to 60 business days |
|---|---|---|
| First item | £ 59.40 | £ 59.40 |
Payment methods
- Paypal
Store description
preigu betreibt einen Onlineversandhandel mit über 1 Mio. Produkten in verschiedenen Sortimenten. Das Kernsortiment besteht aus Büchern, Medien und Spielwaren. Ein gelungenes Einkaufserlebnis ist das Ziel einer jeden Bestellung bei preigu, denn der Kunde und seine Zufriedenheit stehen an erster Stelle. preigu setzt daher auf einen kompetenten Kundenservice, funktionierende Prozesse und schnelle Reaktion.
Specialty
Bücher, SpielwarenSeller's business information
preigu GmbH & Co. KG
Lengericher Landstraße 19
Osnabrück, Germany 49078
Terms of sale
About Us
Legal website operator identification:
preigu GmbH & Co. KG
Lengericher Landstr. 19
49078 Osnabrück
Germany
Telephone: +49 (0) 541 / 580 72 84
Email: mail@preigu.de
VAT No: DE 455 380 498
AG Osnabrück - HRA 209647
PhG: preigu Verwaltung GmbH
AG Osnabrück - HRB 221793
CEO: Ansas Meyer
We are neither willing nor obliged to participate in dispute resolution proceedings before consumer arbitration boards.
We are a member of the initiative "FairCommerce" since 30.11.2016.
For more information, see: https://www.haendlerbund.de/de/haendlerbund/interessenvertretung/faircommerce
Right of withdrawal
Instructions for revocation
Right of withdrawal for the sale of goods
Revocation right for consumers
(A ‘consumer' is any natural person who concludes a legal transaction which, to an overwhelming extent, cannot be attributed to either his commercial or independent professional activities.)
Instructions for revocation
Revocation right
You have the right to revoke this contract within 14 days without specifying any reasons.
The revocation period is 14 days with effect from the day,
-
on which you or a third party nominated by you, which is not the carrier, had taken possession of the products, provided you had ordered one or more products within the scope of a standard order and this/these product/products is/are delivered uniformly;
-
on which you or a third party nominated by you, which is not the carrier, had taken possession of the last product, provided you had ordered several products within the scope of a standard order and these products are delivered separately;
-
on which you or a third party nominated by you, which is not the carrier, had taken possession of the last part delivery or the last unit, provided you had ordered a product, which is delivered in several part deliveries or units;
To exercise your right of withdrawal, you must inform us (preigu GmbH & Co. KG, Lengericher Landstr. 19, 49078 Osnabrück, Telephone number: +49 (0) 541 / 580 72 84, E-Mail address: mail@preigu.de) by means of a clear declaration (e.g. a letter sent by post, or an e-mail) of your decision to withdraw from this contract. You can use the attached model withdrawal form for this purpose, which is, however, not mandatory.
You can also exercise your right of withdrawal online by clicking on a button labelled accordingly (such as ‘Withdraw from contract' or similar) on the AbeBooks/ZVAB website. If you use this online function, you will immediately receive a confirmation of receipt on a durable medium (e.g. via email) containing information on the content of the withdrawal notice, as well as the date and time of its receipt.
In order to safeguard the revocation period, it is sufficient that you send the notification about the exercise of the revocation right before the expiry of the revocation period.
Consequences of the revocation
If you revoke this contract, we shall repay all the payments, which we received from you, including the delivery costs (with the exception of additional costs, which arise from that fact that you selected a form of delivery other than the most reasonable standard delivery offered by us), immediately and at the latest within 14 days from the day on which we received the notification about the revocation of this contract from you. We use the same means of payment, which you had originally used during the original transaction, for this repayment unless expressly agreed otherwise with you; you will not be charged any fees owing to this repayment.
We can refuse the repayment until the products are returned to us or until you have furnished evidence that you have sent the products back to us, depending on whichever is earlier.
You must return or transfer the products to us immediately and, in any case, at the latest within 14 days with effect from the day on which you inform us of the revocation of this contract. The deadline is maintained if you send the products before the expiry of the 14 day deadline.
You bear the direct costs for returning the products.
You must pay for any depreciation of the products only if this depreciation can be attributed to any handling with you that was not necessary for checking the condition, features and functionality of the products.
Criteria for exclusion or expiry
The revocation right is not available for contracts
-
for delivery of products, which are not prefabricated and for whose manufacturing an individual selection or stipulation by the consumer is important or which are clearly tailored to the personal requirements of the consumer;
-
for delivery of products, which can spoil quickly or whose use-by date would be exceeded quickly;
-
for delivery of alcoholic drinks, whose price was agreed at the time of concluding the contract, which however can be delivered 30 days after the conclusion of the contract at the earliest and whose current value depends on the fluctuations in the market, on which the entrepreneur has no influence;
-
for delivery of newspapers, periodicals or magazines with the exception of subscription contracts. The revocation right expires prematurely in case of contracts
-
for delivery of sealed products, which are not suitable for return for reasons of health protection or hygiene if their seal has been removed after the delivery;
-
for delivery of products if they have been mixed inseparably with other goods after the delivery, owing to their condition;
-
for delivery of sound or video recording or computer software in a sealed package if the seal has been removed after the delivery.
Specimen - revocation form
(If you wish to revoke the contract, please fill up this form and send it back to us.)
-
To preigu GmbH & Co. KG, Lengericher Landstr. 19, 49078 Osnabrück, Email address: mail@preigu.de :
-
I/we () herewith revoke the contract concluded by me/ us () regarding the purchase of the following products ()/
the provision of the following service () -
Ordered on ()/ received on ()
-
Name of the consumer(s)
-
Address of the consumer(s)
-
Signature of the consumer(s) (only in case of a notification on paper)
-
Date
(*) Cross out the incorrect option.