Sponsored
Sponsored
Free Edition
Verified Content
Real-World Bug Hunting: A Field Guide to Web Hacking
Overview
Uses real-world bug reports (vulnerabilities in software or in this case web applications) to teach programmers and InfoSec professionals how to discover and protect vulnerabilities in web applications.
Real-World Web Hacking is a field guide to finding software bugs. Ethical hacker Peter Yaworski breaks down common types of bugs, then contextualizes them with real bug bounty reports released by hackers on companies like Twitter, Facebook, Google, Uber, and Starbucks. As you read each report, you'll gain deeper insight into how the vulnerabilities work and how you might find similar ones.
Each chapter begins with an explanation of a vulnerability type, then moves into a series of real bug bounty reports that show how the bugs were found. You'll learn things like how Cross-Site Request Forgery tricks users into unknowingly submitting information to websites they are logged into; how to pass along unsafe JavaScript to execute Cross-Site Scripting; how to access another user's data via Insecure Direct Object References; how to trick websites into disclosing information with Server Side Request Forgeries; and how bugs in application logic can lead to pretty serious vulnerabilities. Yaworski also shares advice on how to write effective vulnerability reports and develop relationships with bug bounty programs, as well as recommends hacking tools that can make the job a little easier.
Real-World Web Hacking is a field guide to finding software bugs. Ethical hacker Peter Yaworski breaks down common types of bugs, then contextualizes them with real bug bounty reports released by hackers on companies like Twitter, Facebook, Google, Uber, and Starbucks. As you read each report, you'll gain deeper insight into how the vulnerabilities work and how you might find similar ones.
Each chapter begins with an explanation of a vulnerability type, then moves into a series of real bug bounty reports that show how the bugs were found. You'll learn things like how Cross-Site Request Forgery tricks users into unknowingly submitting information to websites they are logged into; how to pass along unsafe JavaScript to execute Cross-Site Scripting; how to access another user's data via Insecure Direct Object References; how to trick websites into disclosing information with Server Side Request Forgeries; and how bugs in application logic can lead to pretty serious vulnerabilities. Yaworski also shares advice on how to write effective vulnerability reports and develop relationships with bug bounty programs, as well as recommends hacking tools that can make the job a little easier.
Finding high-quality digital editions shouldn't be a challenge. With instant access to our curated library, you can start your journey with Aftermath immediately. Whether on your phone, tablet, or e-reader, the story of Raleigh's life is presented in a format designed for modern readers.
To get started finding Real-World Bug Hunting: A Field Guide to Web Hacking, you are right to find our website which has a comprehensive collection of titles listed. Our library is one of the most comprehensive resources for free digital reading materials, providing verified and safe content for book lovers worldwide.
36,114 currently reading
152,889 want to read
Sponsored
Sponsored
Book details & editions
| ISBN | 1593278616 |
| Publisher | N/A |
| Publication date | N/A |
| Language | English |
| Pages | pages |
| Reading Options | PDF · EPUB · Mobi |
Sponsored
Sponsored
Ratings & Reviews
5 ★
81.4%
4 ★
14.6%
3 ★
3%
2 ★
0.6%
1 ★
0.4%
4.76
BlueReads Choice
Sponsored
Write a Review
Community Reviews
Sort by: