Real-World Bug Hunting: A Field Guide to Web Hacking. Peter Yaworski

Real-World Bug Hunting: A Field Guide to Web Hacking


Real-World-Bug-Hunting-A.pdf
ISBN: 9781593278618 | 264 pages | 7 Mb

Download PDF




  • Real-World Bug Hunting: A Field Guide to Web Hacking
  • Peter Yaworski
  • Page: 264
  • Format: pdf, ePub, fb2, mobi
  • ISBN: 9781593278618
  • Publisher: No Starch Press
Download Real-World Bug Hunting: A Field Guide to Web Hacking


E book download pdf Real-World Bug Hunting: A Field Guide to Web Hacking (English Edition) by Peter Yaworski 9781593278618 ePub CHM PDB

Overview

Uses real-world bug reports (vulnerabilities in software or in this case web applications) to teach programmers and InfoSec professionals how to discover and protect vulnerabilities in web applications. Real-World Bug Hunting is a field guide to finding software bugs. Ethical hacker Peter Yaworski breaks down common types of bugs, then contextualizes them with real bug bounty reports released by hackers on companies like Twitter, Facebook, Google, Uber, and Starbucks. As you read each report, you'll gain deeper insight into how the vulnerabilities work and how you might find similar ones. Each chapter begins with an explanation of a vulnerability type, then moves into a series of real bug bounty reports that show how the bugs were found. You'll learn things like how Cross-Site Request Forgery tricks users into unknowingly submitting information to websites they are logged into; how to pass along unsafe JavaScript to execute Cross-Site Scripting; how to access another user's data via Insecure Direct Object References; how to trick websites into disclosing information with Server Side Request Forgeries; and how bugs in application logic can lead to pretty serious vulnerabilities. Yaworski also shares advice on how to write effective vulnerability reports and develop relationships with bug bounty programs, as well as recommends hacking tools that can make the job a little easier.



More eBooks:
Téléchargement ebook gratuit pour les nederlands Synchronicité - Hasard ou providence ?
Download free phone book pc The Ascent to Godhood by JY Yang DJVU FB2
Download english books pdf free If My Body Could Speak (English Edition)
Download free ebooks online for nook A Fortune for Your Disaster (English literature) by Hanif Abdurraqib MOBI 9781947793439
Descargar libro a ipod IGNACIO ELLACURÍA in Spanish de GABRIELE FADINI
Téléchargement gratuit de livres pdf torrent Le cerbère blanc FB2 (French Edition)
Electronics livres pdf à télécharger Chi, une vie de chat Tome 22 RTF CHM par Konami Kanata (Litterature Francaise)
Descarga de zip de libros de epub GUIA TECNICA DE INTERVENCION LOGOPEDICA EN LA ENFERMEDAD DE PARKI NSON (Spanish Edition) 9788497563437
Free ebook download for ipod Death of the Territories: Expansion, Betrayal and the War that Changed Pro Wrestling Forever 9781773052328 MOBI (English literature) by Tim Hornbaker