Book description
Learn how to execute web application penetration testing end-to-end
About This Book- Build an end-to-end threat model landscape for web application security
- Learn both web application vulnerabilities and web intrusion testing
- Associate network vulnerabilities with a web application infrastructure
Practical Web Penetration Testing is for you if you are a security professional, penetration tester, or stakeholder who wants to execute penetration testing using the latest and most popular tools. Basic knowledge of ethical hacking would be an added advantage.
What You Will Learn- Learn how to use Burp Suite effectively
- Use Nmap, Metasploit, and more tools for network infrastructure tests
- Practice using all web application hacking tools for intrusion tests using Kali Linux
- Learn how to analyze a web application using application threat modeling
- Know how to conduct web intrusion tests
- Understand how to execute network infrastructure tests
- Master automation of penetration testing functions for maximum efficiency using Python
Companies all over the world want to hire professionals dedicated to application security. Practical Web Penetration Testing focuses on this very trend, teaching you how to conduct application security testing using real-life scenarios.
To start with, you'll set up an environment to perform web application penetration testing. You will then explore different penetration testing concepts such as threat modeling, intrusion test, infrastructure security threat, and more, in combination with advanced concepts such as Python scripting for automation. Once you are done learning the basics, you will discover end-to-end implementation of tools such as Metasploit, Burp Suite, and Kali Linux. Many companies deliver projects into production by using either Agile or Waterfall methodology. This book shows you how to assist any company with their SDLC approach and helps you on your journey to becoming an application security specialist.
By the end of this book, you will have hands-on knowledge of using different tools for penetration testing.
Style and approachIn this book, you will learn and understand the workflow of application security testing. Starting from analysis using threat modeling until the testing phase and before the web project goes into production, you will be able conduct effective penetrating testing using web intrusion tests , network infrastructure tests, and code review.
Publisher resources
Table of contents
- Title Page
- Copyright and Credits
- Packt Upsell
- Contributors
- Preface
- Building a Vulnerable Web Application Lab
- Kali Linux Installation
- Delving Deep into the Usage of Kali Linux
-
All About Using Burp Suite
- An introduction to Burp Suite
- A quick example
- Visualizing the application structure using Burp Target
- Intercepting the requests/responses using Burp Proxy
- Crawling the web application using Burp Spider
- Looking for web vulnerabilities using the scanner
- Replaying web requests using the Repeater tab
- Fuzzing web requests using the Intruder tab
- Installing third-party apps using Burp Extender
- Summary
- Understanding Web Application Vulnerabilities
- Application Security Pre-Engagement
-
Application Threat Modeling
- Software development life cycle
- Application Threat Modeling at a glance
- Application Threat Modeling in real life
- Application Threat Modeling document parts
- Practical example
- Summary
- Source Code Review
- Network Penetration Testing
- Web Intrusion Tests
- Pentest Automation Using Python
- Nmap Cheat Sheet
- Metasploit Cheat Sheet
- Netcat Cheat Sheet
- Networking Reference Section
- Python Quick Reference
- Other Books You May Enjoy
Product information
- Title: Practical Web Penetration Testing
- Author(s):
- Release date: June 2018
- Publisher(s): Packt Publishing
- ISBN: 9781788624039
You might also like
book
Social Engineering: The Art of Human Hacking
The first book to reveal and dissect the technical aspect of many social engineering maneuvers From …
book
The CISSP® and CAP
This follow-on edition to The CISSP Prep Guide: Mastering CISSP and ISSEP offers value-add coverage not …
book
CompTIA Security+ Review Guide, 4th Edition
Consolidate your knowledge base with critical Security+ review CompTIA Security+ Review Guide, Fourth Edition, is the …
book
Information Security Handbook
Implement information security effectively as per your organization's needs. About This Book Learn to build your …