After a review of the basics of web applications, you′ll be introduced to web application hacking concepts and techniques such as vulnerability analysis, attack simulation, results analysis, manuals, source code, and circuit diagrams. These web application hacking concepts and techniques will prove useful information for ultimately securing the resources that need your protection.
What you will learn from this book
- Surveillance techniques that an attacker uses when targeting a system for a strike
- Various types of issues that exist within the modern day web application space
- How to audit web services in order to assess areas of risk and exposure
- How to analyze your results and translate them into documentation that is useful for remediation
- Techniques for pen–testing trials to practice before a live project
Who this book is for
This book is for programmers, developers, and information security professionals who want to become familiar with web application security and how to audit it.
Wrox Professional guides are planned and written by working programmers to meet the real–world needs of programmers, developers, and IT professionals. Focused and relevant, they address the issues technology professionals face every day. They provide examples, practical solutions, and expert education in new technologies, all designed to help programmers do a better job.
Chapter 1: Penetration Testing Web Applications.
Chapter 2: Web Applications: Some Basics.
Chapter 3: Discovery.
Chapter 4: Vulnerability Analysis.
Chapter 5: Attack Simulation Techniques and Tools: Web Server.
Chapter 6: Attack Simulation Techniques and Tools: Web Application.
Chapter 7: Attack Simulation Techniques and Tools: Known Exploits.
Chapter 8: Attack Simulation Techniques and Tools: Web Services.
Chapter 9: Documentation and Presentation.
Chapter 10: Remediation.
Chapter 11: Your Lab.
Appendix A: Basic SQL.
Appendix B: Basic LDAP.
Appendix C: XPath and XQuery.
Appendix D: Injection Attack Dictionaries.