August 2023
Intermediate to advanced
338 pages
7h 49m
English
Overview
Understand modern web security with "Attacking and Exploiting Modern Web Applications." This book equips you with the techniques and tools needed to perform web application penetration testing effectively. You will gain hands-on experience identifying vulnerabilities like SQL Injection, XSS, RCE, and more, while exploring frameworks and tools used by security professionals and hackers.
What this Book will help me do
- Master the mindset, methodologies, and toolsets fundamental for conducting web security assessments.
- Identify vulnerabilities across web applications, IoT devices, and Ethereum smart contracts and learn to secure them.
- Enhance practical skills by analyzing real-world cases and setting up secure environments.
- Learn the process of automating vulnerability detection with Bash and Python scripting.
- Familiarize yourself with handling and disclosing vulnerabilities responsibly.
Author(s)
Simone Onofri is a seasoned security professional with extensive experience in web application and IoT security, bringing practical expertise in exploit development and vulnerability assessment. Onofri has worked with leading organizations to secure their systems against cutting-edge threats and authored research in application security. This expertise guarantees a practical focus on real-world challenges.
Who is it for?
If you are a penetration tester, red team member, or security analyst looking to improve your ability to identify and exploit vulnerabilities, this book is for you. Developers aiming to understand security risks inherent in their applications or DevOps professionals securing their environments will find value here too. It also appeals to CISOs and security managers seeking insights into threats and risk mitigation.
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.