Bug Bounty Hunting for Web Security

iebukes Apress, 电子书 352 次浏览 没有评论

Book Description:

Start with the basics of bug hunting and learn more about implementing an offensive approach by finding vulnerabilities in web applications. Getting an introduction to Kali Linux, you will take a close look at the types of tools available to you and move on to set up your virtual lab. You will then discover how request forgery injection works on web pages and applications in a mission-critical setup. Moving on to the most challenging task for any web application, you will take a look at how cross-site scripting works and find out about effective ways to exploit it.

You will then learn about header injection and URL redirection along with key tips to find vulnerabilities in them. Keeping in mind how attackers can deface your website, you will work with malicious files and automate your approach to defend against these attacks. Moving on to Sender Policy Framework (SPF), you will see tips to find vulnerabilities in it and exploit them. Following this, you will get to know how unintended XML injection and command injection work to keep attackers at bay. Finally, you will examine different attack vectors used to exploit HTML and SQL injection. Overall, Bug Bounty Hunting for Web Security will help you become a better penetration tester and at the same time it will teach you how to earn bounty by hunting bugs in web applications.

What You Will Learn

    • Implement an offensive approach to bug hunting

Create and manage request forgery on web pages

    • Poison Sender Policy Framework and exploit it

Defend against cross-site scripting (XSS) attacks

    • Inject headers and test URL redirection

Work with malicious files and command injection

  • Resist strongly unintended XML attacks
Who This Book Is For
White-hat hacking enthusiasts who are new to bug hunting and are interested in understanding the core concepts.

免积分下载:Bug Bounty Hunting for Web Security

 

 亲,网盘文件已删,下载链接已失效


因为,我,失业了!于是我老家十八线小县城找了份掏下水道的工作。。。
 
为了生活
 
我决定将iebueks电子网站由免费改为赞助入群:
 
一年45元
 
从百度网盘群满之日算起。
 
这45元除了最新的英文IT电子书,还包括:

免费找书服务,中文英文皆可

国内出版社出版的中文电子书  
中文电子书
2022年公考资料
2022年公考资料
2023年考研学习资料
2023年考研学习资料
人人素材网各种视频素材模板以及中文字幕教程
人人素材网

入群指南


扫描下面二维码关注微信公众号获取资源

微信公众号二维码

发表评论

您的电子邮箱地址不会被公开。 必填项已用*标注

Go