(PDF) Web Penetration Testing: Second Edition Android

(PDF) Web Penetration Testing: Second Edition Android

(PDF) Web Penetration Testing: Second Edition Android
Description :
Web Penetration testing second edition combines theoretical and practical
knowledge to teach readers about Web applications and API penetration
testing. This book is intended for beginners of web penetration testing, but it
also covers advanced topics such as API penetration testing and the different
technologies involved in Web application design. This book also covers the
vulnerabilities of websites and databases, how to exploit them to gain access,
as well as how to protect against these vulnerabilities.This guide provides an
in-depth learning experience with both theoretical and practical aspects.
Included are 39 step-by-step exercises that cover many web application
hacking tools and techniques in the following categories: Website information
gathering tools and techniques. DNS hijacking and DNS redirection. Web
Application Firewalls WAF. Website vulnerability scanners such as Nikto, Burp
Suite , OWASP-ZAP and WPScan. Input-output Manipulation such as SQL
injection, Cross site scripting XSS, Path Traversal and Cross Site Request
Forgery CSRF. Authentication and Authorization attacks using Burp Suite and
Hydra. Session Attacks. API security and API Penetration testing. Using
Postman tool for API analysis and manipulating.