Real-World Bug Hunting: A Field Guide to Web Hacking by Peter Yaworski
- Real-World Bug Hunting: A Field Guide to Web Hacking
- Peter Yaworski
- Page: 264
- Format: pdf, ePub, mobi, fb2
- ISBN: 9781593278618
- Publisher: No Starch Press
Download Real-World Bug Hunting: A Field Guide to Web Hacking
Scribd download free books Real-World Bug Hunting: A Field Guide to Web Hacking
Overview
Uses real-world bug reports (vulnerabilities in software or in this case web applications) to teach programmers and InfoSec professionals how to discover and protect vulnerabilities in web applications. Real-World Bug Hunting is a field guide to finding software bugs. Ethical hacker Peter Yaworski breaks down common types of bugs, then contextualizes them with real bug bounty reports released by hackers on companies like Twitter, Facebook, Google, Uber, and Starbucks. As you read each report, you'll gain deeper insight into how the vulnerabilities work and how you might find similar ones. Each chapter begins with an explanation of a vulnerability type, then moves into a series of real bug bounty reports that show how the bugs were found. You'll learn things like how Cross-Site Request Forgery tricks users into unknowingly submitting information to websites they are logged into; how to pass along unsafe JavaScript to execute Cross-Site Scripting; how to access another user's data via Insecure Direct Object References; how to trick websites into disclosing information with Server Side Request Forgeries; and how bugs in application logic can lead to pretty serious vulnerabilities. Yaworski also shares advice on how to write effective vulnerability reports and develop relationships with bug bounty programs, as well as recommends hacking tools that can make the job a little easier.
Other ebooks: Google ebooks descarga gratuita para kindle COMETIERRA de DOLORES REYES here, Google ebook télécharger Android Les premières enquêtes de Lizzie Martin - Un intérêt particulier pour les morts ; La curiosité est un péché mortel MOBI PDB 9782264075925 en francais par Ann Granger download link, Free download pdf e books Words on Fire in English by Jennifer A. Nielsen PDF RTF CHM here, Ebook free downloads in pdf format Buseyisms: Gary Busey's Basic Instructions Before Leaving Earth RTF iBook ePub site, Forums gratuits de téléchargement d'ebook 15 000 volts - Une méthode pour s'accomplir. Le récit d'une renaissance 9782290166512 en francais FB2 download pdf, Libros gratis en pdf para descargar. PECADO: NADIE DIJO QUE FUERA UN SANTO RTF 9788417333430 de KATY EVANS read book,
0コメント