September 2024
Intermediate to advanced
444 pages
12h 30m
Spanish
Content preview from Seguridad de las Aplicaciones Web, 2ª Edición
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Parte II. Delito
En la Parte I de este libro, exploramos varias formas de investigar y documentar la estructura y función de una aplicación web. Evaluamos formas de encontrar APIs en un servidor, incluidas las que existen en subdominios y no sólo en el dominio de nivel superior. Consideramos métodos para enumerar los puntos finales que esas API exponían y los verbos HTTP que aceptaban.
Tras elaborar un mapa de subdominios, API y verbos HTTP, buscamos formas de determinar qué tipo de cargas útiles de solicitud y respuesta aceptaría cada punto final. Abordamos esto desde un ángulo genérico, así como buscando métodos para encontrar especificaciones abiertas que nos llevaran más rápidamente a la estructura de la carga útil.
Tras investigar formas de trazar la estructura de la API de una aplicación, iniciamos una conversación sobre las dependencias de terceros y evaluamos varias formas de detectar integraciones de terceros en una aplicación de origen. A partir de esta investigación, aprendimos a detectar frameworks SPA, bases de datos y servidores web, y aprendimos técnicas generales (como la huella digital) para identificar versiones de otras dependencias.
Por último, concluimos nuestra conversación sobre el reconocimiento hablando de los fallos arquitectónicos que pueden conducir a una funcionalidad mal protegida. Al evaluar algunas formas comunes de arquitectura insegura de aplicaciones web, hemos adquirido una visión de los peligros a los que se enfrentan las aplicaciones web desarrolladas ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.